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About This Manual 


Preface 


Read This First 


This manual describes the Tl486SXL(C) microprocessor product family. Each 
chapter except for chapters 3 and 4 covers all versions of the TI486SXLC and 
the Tl486SXL microprocessors. Chapter 3 explicitly covers the Tl486SXLC 
series and chapter 4 explicitly covers the TI486SXL series. 


How to Use This Manual 


This document contains the following chapters: 


Chapter 1 Product Overview 


Chapter 1 introduces the features of the Tl486SXLC and TI486SXL micropro- 
cessor series and defines the differences between them. A functional block 
diagram, logic symbol, and I/O signal identifications are provided for each of 
the two series of microprocessors. Additional material describes selected 
system architectures such as the execution pipeline, the on-chip cache 
memory, and the power-management techniques. 


Chapter 2. Programming Interface 


Chapter 2 describes the internal operations of the TI486SXL(C) family of mi- 
croprocessors mainly from an application programmer’s point of view. In- 
cluded in this chapter are descriptions of processor initialization, the register 
sets, memory addressing, various types of interrupts, system-management 
mode, and the shutdown and halt process. Overviews of real, virtual-8086, 
and protected operating modes are also included. 


Chapter 3  TI486SXLC Microprocessor Bus Interface 


Chapter 3 provides a summary of the TI486SXLC series processor signals 
and descriptions of all inouts/outputs, functional timing and bus operations (in- 
cluding pipelined and nonpipelined addressing), various interfaces, and power 
management. 


About This Manual 


Chapter 4 TIl486SXL Microprocessor Bus Interface 


Chapter 4 provides a summary of the TI486SXL series processor signals and 
descriptions of all inputs/outputs, functional timing and bus operations (includ- 
ing pipelined and nonpipelined addressing), various interfaces, and power 
management. 


Chapter 5 Electrical Specifications 


Chapter 5 provides electrical specifications for the Tl486SXL(C) family, includ- 
ing specifications for the 3.3-volt versions. The specifications include electrical 
connection requirements for all package pins, maximum ratings, recom- 
mended operating conditions, dc electrical characteristics, and ac characteris- 
tics. 


Chapter 6 Mechanical Specifications 


Chapter 6 provides mechanical specifications for the Tl486SXL(C) family that 
include pin assignments, package physical dimensions, and package thermal 
characteristics. 


Chapter 7 Instruction Set 


Chapter 7 summarizes the instruction set forthe Tl486SXL(C) family and pro- 
vides detailed information of the instruction encoding. The instruction set is the 
same for all TlI486SXL(C) microprocessors. Instructions are listed in an 
instruction set summary table that provides information on the flags affected 
and the instruction clock counts for each instruction. 


Appendix A Programming System Management Mode (SMM) 


Appendix A provides detailed information including examples pertinent to pro- 
gramming the TI486SXL(C) system management mode (SMM). Included are 
implementing system-management interrupt (SMI), testing/debugging SMM 
code, utilizing power management, loading SMM programs, detecting the type 
of CPU, detecting the presence of SMM-capable devices, creating macros, 
and altering SMM code limits. 


Appendix B_ BIOS Modifications Guide 


Appendix B discusses types of BIOS changes to be considered by the PC de- 
signer. The topics are power-on and hard reset, protected-mode to real-mode 
switching, and soft reset. Examples of assembler code for turning the cache 
on and off are provided. 


Appendix C Design Considerations and Cache Flush 


Appendix C provides design considerations, address bit A20 masking, and 
general cache invalidation procedures. 


About This Manual / Style and Symbol Conventions 


Appendix D OEM Modifications for 168-Pin CPGA 


Appendix D describes the potential modifications an OEM needs to implement 
on an existing 486SX/DX/DX4 motherboard to take advantage of the 
TI486SXL 168 pin ceramic pin grid array (CPGA). A system implementation 
is described for a3.3-V system that supports a 5-V industry standard architec- 
ture (ISA) anda3.3-V VL (VESA, Video Electronics Specifications Association 
local bus), and another implementation is described for a mixed 3.3-V/5-V sys- 
tem that supports a 5-V ISA and a 5-V VL bus. 


Appendix E Thermal Management in Microprocessor-Based Systems 


Appendix E provides the reader with basic thermal concepts and the relation- 
ship between thermal measurements and the system. In addition, problems 
associated with comparing thermal specifications from different manufactur- 
ers are discussed. Finally, corrective activity within JEDEC is detailed. 


Appendix F Ordering Information 
Appendix F provides detailed ordering information showing the meaning of the 
components of the part number and a description of each microprocessor of- 
fered. 

Appendix G Glossary 
Appendix G contains explanations for the terms, abbreviations, and acronyms 
used in this manual. 

Notational Conventions 
This document uses the following conventions. 


(J Program code listings and program code examples are shown in a spe- 
cial typeface similar to a typewriter’s. 


Here is a sample assembler code program listing: 


CLI 
MOV EAX, CRO ; set bit 30, turn off cache 
OR FAX, 40000000h ; for external cache coherency 


(J Inthe instruction syntax descriptions, the instruction is ina bold typeface 
and a description of the instruction is in italic typeface. Here is an example 
of an instruction syntax and description: 


RSM Resume from SMM Mode 


Read This First V 


Information About Cautions and Warnings / Trademarks 


Information About Cautions and Warnings 


Trademarks 


vi 


This book may contain cautions and warnings. 


This is an example of a caution statement. 


A caution statement describes a situation that could potentially 
damage your software or equipment. 


This is an example of a warning statement. 


A warning statement describes a situation that could potentially 
cause harm to you. 


The information in a caution or a warning is provided for your protection. 
Please read each caution and warning carefully. 


AMD is a trademark of Advanced Micro Devices, Inc. 


EPIC is a trademark of Texas Instruments Incorporated. 
HP is a trademark of Hewlett-Packard Co. 


Intel is a trademark of Intel Corporation. 
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Product Overview 


This chapter introduces the features of the TI486SXLC series and TI486SXL 
series of microprocessors and defines the differences between them. A 
functional block diagram, logic symbol, and |/O signal identifications are 
provided for the TI486SXLC and TI486SXL series of microprocessors. 
Additional material describes selected system architectures such as the 
execution pipeline, the on-chip cache memory, and the power-management 


techniques. 
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This document contains information on products in more than one phase 
of development. The status of each device is indicated on the page(s) 
specifying its electrical characteristics. 


Features 


1.1 Features 


The TI486SXLC and TI486SXL series microprocessors are attractive for new 
486-compatible system designs as they are instruction-set and footprint com- 
patible with existing platforms. Additionally, they implement high-performance 
levels, including clock-doubled CPUs with on-chip 8K-byte cache, advanced 
power-management techniques, and industry-standard pinouts that simplify 
implementation of energy-efficient desktop and/or battery-powered notebook 
systems. Their expanded features are: 


Lj} 486 architecture and performance 


486-compatible instruction set and register set 


On-chip 8K-byte, 32-bit instruction/data cache configured as two-way 
set associative 


Clock-doubled 3.3-V with 5-V tolerant I/Os and 5-V versions 
Highly optimized, variable-length pipeline 
On-chip 16-bit hardware multiplier 


(J High-performance, footprint-compatible upgrade path for existing 
TI486SLC and TI486DLC platforms 


Clock speeds up to 50 MHz 


Industry standard footprints: 

TI486SXLC series uses 100-pin QFP (486SLC footprint) 

TI486SXL series uses 132-pin PGA (486DLC footprint), 144-pin plas- 
tic or ceramic QFP (486DLC footprint), and a 168-pin CPGA (486SX 
footprint) 


[J Advanced power-management features for battery-powered notebook 
and energy-efficient desktop PC systems 


System-management mode (SMM) 


High-priority system-management interrupt (SMI) with separate 
memory-address space 


Suspend mode (initiated by either hardware or software) 
Dynamic clock scaling 

Fully static device permits clock-stop state 

Approximately 60-percent power savings in 3.3-V versions 


3.3-V versions with 5-V tolerant inputs and outputs (available in the 
TI486SXL series) can be used in 3.3-V-only or mixed 3.3-V/5-V 
systems 


Features 


Features (Continued) 


11 Texas Instruments EPIC™ submicron CMOS technology 


LJ 32-bit internal and 16-bit external buses in the TI486SXLC series. This 
product offering is shown in Table 1-1. 


Table 1-1. Tl486SXLC Product Offering 


TI486SXLC Series Supply Voltage _ Speed (MHz) 
Device Part Number (V) Core Bus Package 


TX486SXLC-V25-PJF 3.3 25 25 100-pin QFP 
TX486SXLC-040-PJF 5 40 40, 20t 
TX486SXLC2-050-PJF 5 50 25 

t These microprocessors can be operated as nonclock-doubled 40 MHz or clock-doubled 20/40 
MHz. 


(32-bit internal and 32-bit external buses in the Tl486SXL series. This prod- 
uct offering is shown in Table 1-2 


Table 1-2. TlI486SXL Product Offering 


TI486SXL Series Supply Voltage _ Speed (MHz) 
Device Part Number (V) Core Bus Package 


TX486SXL-040S-GA 5 40 40,201 132-pin PGA 
TX486SXL2-050S-GA 5 50 25 
TX486SXL-040-PCE 5 40 40, 20T 144-pin TEP 
TX486SXL-G40-HBN 3.3-V, 5-V tolerant 40 40,201 144-pin ce- 
TX486SXL2-G50-HBN ~—3.3-V,5-Vtolerant 50 25 ramic QFP 
TX486SXL-040-HBN 5 40 40, 20T 
TX486SXL2-050-HBN 5 50 25 

“TX486SXL-G40-GA_—s3.3-V,5-Vtolerant 40 40,201 168-pin PGA 
TX486SXL2-G50-GA 3.3-V, 5-V tolerant 50 25 
TX486SXL-V40-GA 3.3 40 40, 20T 
TX486SXL2-V50-GA 3.3 50 25 
TX486SXL-040-GA 5 40 40, 20T 
TX486SXL2-050-GA 5 50 25 

t These microprocessors can be operated as nonclock-doubled 40 MHz or clock-doubled 20/40 
MHz. 


For an explanation of the part numbers see Appendix F. 
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Introduction 


1.2 


Introduction 


The Texas Instruments Tl486SXL(C) microprocessor family is comprised of 
advanced x86-compatible processors that offer clock-doubled features for in- 
creased system performance. Each processor provides an internal 8K-byte, 
32-bit cache and integrated power management on a single chip. 


The fully static, 486-instruction-set-compatible TI486SXLC series micropro- 
cessors are backward compatible with the TI486SLC/E. The TI486SXLC2 
microprocessors contain a clock-doubled feature for increased system 
performance up to 50 MHz. The TI486SXLC series is an ideal solution for 
battery-powered applications as it typically draws only 0.1-mA supply current 
while the input clock is stopped in suspend mode. The TI486SXLC-V25 offers 
additional power savings as it operates from a 3.3-V power supply. 


The fully static, 486-instruction-set-compatible Tl1486SXL series microproces- 
sors are available in three package types: a 132-pin PGA, 144-pin QFP, and 
a 168-pin PGA. The 132-pin PGA TI486SXL and TI486SXL2 are backward 
compatible with the TI486DLC/E. The 144-pin QFP TI486SXL and Tl486SXL2 
are backward compatible with the 486DLC footprint. The 168-pin PGA 
TI486SXL and TI486SXL2 have the same footprint as the 486SX pinout (see 
Appendix D, OEM Modifications for 168-Pin CPGA). The Tl486SXL2 micro- 
processors contain aclock-doubled feature for increased system performance 
up to 50 MHz. The TI486SXL series is an ideal solution for battery-powered 
applications as it typically draws only 0.1 mA while the input clock is stopped 
in suspend mode. The TI486SXL-V40 and TIl486SXL2-V50 offer additional 
power savings as they operate from a 3.3-V power supply. The TI486SXL-G40 
and T1486SXL2-G50 offer the equivalent power savings with the added capa- 
bility to operate in either 3.3-V-only systems or in mixed 3.3-V/5-V systems. 


The TI486SXL series microprocessors support 8-, 16-, and 32-bit data types 
and operate in real, virtual-8086, and protected modes. The TI486SXL(C) mi- 
croprocessor family achieves high performance through use of a highly opti- 
mized, variable-length pipeline combined with a RISC-like, single-cycle 
execution unit, an on-chip hardware multiplier, and an 8K-byte integrated 
instruction and data cache. 


TI486SXLC Series Overview 


1.3 TI486SXLC Series Overview 


The Tl486SXLC series of microprocessors are implemented using Texas 
Instruments EPIC™ submicron CMOS technology. The combination of high- 
performance 486-like operation, internal 8K-byte cache, advanced power 
management, and small-form-factor package makes the TI486SXLC series 
ideal for notebook/subnotebook applications. 


A summary of the product offering is shown in Table 1-3. Figure 1-1 is a 
functional block diagram and Figure 1-2 is the logic symbol for the TI486SXLC 
microprocessors. 


Table 1-3. Tl486SXLC Microprocessors 


Speed (MHz) 


Device Supply Voltage (V) " Core Bus PackageT 
TI486SXLC-V25 3.3 25 25 100-pin QFP 
TI486SXLC-040 5 40 40, 20+ 
TI486SXLC2-050 5 50 25 


t Pinout and footprint compatible with TI486SLC/E. 
+ These microprocessors can be operated as nonclock-doubled 40 MHz or clock-doubled 20/40 
MHz. 
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TI486SXLC Series Overview 


Figure 1-1. TI486SXLC Functional Block Diagram 


16-byte 
Decoder Instruction 
Queue 


Clock 
control 


Suspend 
Mode 
Control 


cot] Immediate 


Internal 
Data Bus 


ROM 
Address 
\<—_#_—?>| 


Sequencer Microcode ROM 


| 
| 
| 
| 
| 
32 
| 
| 
| 
| 
| 


Enhanced 386SX- 
Compatible 
Bus Interface 


Data 
Buffers 


| 

| Bus 
| Control 
| Memory 8 KByte 

| Management ae. Instr/Data 

l Unit my Cache 

| ; 

| 

| 

| 

| 


Memory 
Data Bus 


Cee 


| 

| 

| 

| 

| 
| Control SMADS# 
| 

| 

| 

| 

| 


ae Unit 


Shift | Register 
i File 


Control 


Instruction 
Address Bus 


Address 


Cache and Memory Buffers 


Management 


Data Address Bus 


TI486SXLC Microprocessor 


1-6 


TI486SXLC Series Overview 


Figure 1-2. TI486SXLC Logic Symbolt 
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T This symbol is in accordance with ANSI/IEEE Std 91-1991 and IEC Publication 617-12. 
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TI486SXLC Series Overview 


The TI486SXLC includes two power-management signals (SUSP# and 
SUSPA#), two cache-interface signals (FLUSH# and KEN#), an A20 mask 
input (A2Z0M#), and two SMM signals (SMADS# and SMI#) that are additions 
to the 386SX signal set. The TI486SXLC series has the same signal set as the 
TI486SLC/E microprocessor. The complete list of TI486SXLC signals is 
shown in Figure 1-3. 


Figure 1-3. TlI486SXLC Input and Output Signals 
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1.4 TI486SXL Series Overview 


The TIl486SXL series of microprocessors are implemented using Texas 
Instruments EPIC submicron CMOS technology. The combination of 
high-performance 486-like operation, internal 8K-byte cache, 32-bit external 
data path, and advanced power-management features makes the Tl486SXL 
series ideal for energy-efficient desktop and notebook applications. 


A summary of the product offering is shown in Table 1-4. Figure 1-4 is a 
functional block diagram and Figure 1—5 and Figure 1-6 are logic symbols for 
the 132-pin, 144-pin, and 168-pin Tl486SXL microprocessors. 


Table 1-4. Tl486SXL Microprocessors 
Speed (MHz) 


Device Supply Voltage (V) Core Bus Package 
Tl486SXL-G40 3.3-V,5-Vtolerant 40 40,20T 144-pin QFP#, and 
168-pin PGAS 
TI486SXL2-G50 3.3-V, 5-V tolerant 50 25 
TI486SXL-V40 3.3 40 40, 20t 168-pin PGAS 
TI486SXL2-V50 3.3 50 25 
TI486SXL-040 5 40 40,20t 132-pin PGA, 
144-pin QFP#, and 
Tl486SXL2-0501 5 50 25 168-pin PGA§ 
t These microprocessors can be operated as nonclock-doubled 40 MHz or clock-doubled 20/40 
MHz. 


+ Pinout and footprint compatible with TI486DLC/E 
§ Footprint compatible with 486SX. See Appendix D, OEM Modifications for 168-Pin CPGA. 
1 Available in 144-pin ceramic QFP and 168-pin PGA 
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TI486SXL Series Overview 


Figure 1-4. TI486SXL Functional Block Diagram 
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Figure 1-5. TI486SXL Logic Symbolt (132-Pin PGA Package) 
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T This symbol is in accordance with ANSI/IEEE Std 91-1991 and IEC Publication 617-12. 
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Figure 1-6. Tl486SXL Logic Symbolt (144-Pin QFP and 168-Pin PGA Packages) 
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T This symbol is in accordance with ANSI/IEEE Std 91-1991 and IEC Publication 617-12. 
$ 144-pin QFP has W/R# on pins 36 and 37. These terminals must be connected together. 


TI486SXL Series Overview 


The TI486SXL includes two power-management signals (SUSP# and 
SUSPA#), two cache-interface signals (FLUSH# and KEN#), an A20 mask 
input (A2Z0M#), and two SMM signals (SMADS# and SMI#) that are additions 
to the 386DX signal set. The 132-pin PGA TI486SXL has the same signal set 
as the TI486DLC/E microprocessor while the 144-pin QFP and the 168-pin 
PGA have two additional inputs, MEMW#, and FLT#. MEMWG3 is part of the 
cache interface and FLT# can be used to float the bidirectional and output 
signals. (See Appendix D, OEM Modifications for 168-Pin CPGA.) 


The complete list of TlI486SXL signals is shown in Figure 1—7 for the 132-pin 
PGA and Figure 1-8 for the144-pin QFP and 168-pin PGA. 


Figure 1—7. TI486SXL Input and Output Signals for 132-Pin PGA Package 
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TI486SXL Series Overview 


Figure 1-8. TI486SXL Input and Output Signals for 144-Pin QFP and 168-Pin PGA Package 
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Tt 144-pin QFP has W/R# on pins 36 and 37. These terminals must be connected together. 
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1.5 Differences Between the TI486SXLC Series and TI486SXL Series 


The TI486SXLC and the 132-pin Tl486SXL are the same except for how the 
pin signals are routed and utilized on the processors. Thus, the bus interfaces 
are different but the CPU core and the cache/memory management are the 
same. The TI486SXLC has a physical address range of 16M bytes and the 
TI486SXL has a physical address range of 4G bytes. Table 1—5 describes the 
signal differences between the TI486SXLC and TI486SXL. 


Table 1-5. TI486SXLC and Tl486SXL Signal Differences 


—T4B6SXLC—~*~“‘COC‘;+C‘WSGSSXLUSC“‘#LU.._._T48GSXLL(144-pin QP 
Description (100-pin QFP) (132-pin PGA) and 168-pin PGA) 
Data bus 16 bits wide (D15—D0) 32 bits wide (D31—D0) 32 bits wide (D31—D0) 
Address bus A23-A1 A31-A2 A31-A2 
Byte enables 2 byte enables used 4 byte enables used 4 byte enables used 
(BHE#, BLE#) (BE3#-BE0#) (BE3#-BE0#) 
Float bus signal (FLT#) supported not supported supported 
Bus size 16 signal (BS16#) not supported supported supported 
MEMW4# ISA signal not supported not supported supported 


The 144-pin QFP and the 168-pin PGA TI486SXL differ from the Tl486SXLC 
and the 132-pin PGA TI486SXL by the addition of one signal, MEMW#. This 
signal is part of the cache flush logic that is implemented on-chip in the 144- 
and 168-pin versions of the Tl486SXL. For a more detailed description of this 
logic, see Appendix C, Design Considerations and Cache Flushand Appendix 
D, OEM Modifications for 168-Pin CPGA. The 144-pin QFP and the 168-pin 
PGA TI486SXL contain the Tl486SXLC signal FLT# that is not implemented 
in the 132-pin PGA TI486SXL. This signal can be used to float all bidirectional 
and output signals of the Tl486SXL microprocessor when it is used in 
conjunction with an upgrade socket. The 144-pin QFP differs from the 168-pin 
PGA by the addition of a second W/R# input. As these two W/R# inputs must 
be connected together, these devices are functionally the same. 
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1.6 Differences Between the TI486SXL(C) Family and the TI486SLC/DLC 


Family 


The TI486SXLC and the TI486SLC/E are the same in all respects except for 
the cache size, the cache organization, and the clock-doubled feature. The 
TI486SXL and the TI486DLC/E are also the same in all respects except for the 
same new features shown in Table 1-6. Signal differences between the 
TI486SXLC and the 132-pin PGA TI486SXL, listed in Table 1—5, also apply for 
the TI486SLC/E and TI486DLC/E, respectively. 


Table 1-6. TI486SXL and Tl486SLC/DLC Feature Differences 


Description TI486SXL(C) Family TI486SLC/DLC Family 

Cache size 8K bytes 1K byte 

Cache organization Two-way set Two-way set associative 
associative or direct mapped 


Clock doubled Supported Not supported 


Execution Pipeline / On-Chip Cache 


1.7 Execution Pipeline 


The execution path in the TlI486SXL(C) family of microprocessors consists of 
five pipelined stages optimized for minimal instruction-cycle times. These five 
stages are: 


Code fetch 

Instruction decode 

Microcode ROM access 
Execution 

Memory/register file write-back 


OOUUOUU 


These stages have been designed with hardware interlocks that permit execu- 
tion overlap for successive instructions. 


The 16-byte instruction-prefetch queue fetches code in advance and prepares 
it for decode, helping to minimize overall execution time. The instruction de- 
coder then decodes four bytes of instructions per clock, eliminating the need 
for a queue of decoded instructions. Sequential instructions are decoded 
quickly and provided to the microcode. Nonsequential operations do not have 
to wait for a queue of decoded instructions to be flushed and refilled before 
execution continues. As a result, both sequential and nonsequential instruc- 
tion execution times are minimized. 


The execution stage takes advantage of a RISC-like, single-cycle execution 
unit and a 16-bit hardware multiplier. The write-back stage provides single- 
cycle, 32-bit access to the on-chip cache and posts all writes to the cache and 
system bus using a two-deep write buffer. Posted writes allow the execution 
unit to proceed with program execution while the bus-interface unit completes 
the write cycle. 


1.8 On-Chip Cache 


The 8k-byte, 32-bit on-chip cache in the T1486SXL(C) family of microproces- 
sors maximizes overall performance by quickly supplying instructions and 
data to the internal execution pipeline. An external memory access takes a 
minimum of two clock cycles (zero wait states). For cache hits, the Tl486SXL 
series eliminates these two clock cycles by overlapping cache accesses with 
normal execution pipeline activity. In addition, bus bandwidth is gained by 
presenting instructions and data to the execution pipeline at up to 32 bits ata 
time compared to 16 bits per cycle for an external memory access. 


The TI486SXL(C) cache is an 8K-byte, write-through unified instruction and 
data cache with lines that are allocated only during memory read cycles. The 
cache is configured as two-way set associative, and the cache organization 
consists of 1024 sets each containing two lines of four bytes each. 
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1.9 Clock-Doubled Mode 


The T1486SXL(C) family of microprocessors is designed with a clock-doubled 
feature that provides an immediate performance increase and upgrade path 
from the Tl486SLC/DLC family of products. The clock-doubled feature can be 
enabled using software by setting bit 6 of the Configuration Control register 0. 


When the microprocessor is in clock-doubled mode, the internal core is oper- 
ating at the CLK2 frequency while the external bus interface remains at half 
the CLK2 frequency. This provides a speed increase in the on-chip cache, the 
instruction decode, and the instruction execution while the external interface 
remains the same. 


In addition to the clock-doubled feature, the Tl486SXL(C) microprocessor 
family also supports dynamic clock scaling that enables the CLK2 input to be 
scaled up or down. To take advantage of this feature (scaling or stopping the 
CLK2 input), the processor must first be brought into the nonclock-doubled 
mode. Dynamic clock scaling is transparent to the user since the processor 
continues instruction execution in nonclock-doubled mode until the desired 
frequency is reached within the PLL lock range to initiate clock-doubled mode. 
This allows for increased bandwidth on demand without restriction to the user. 


1.10 Power Management 


The Tl486SXL(C) family incorporates advanced power-management features 
such as suspend mode, static operation, and operation at 3.3 V. These capa- 
bilities are attractive for battery-powered notebook and energy-efficient desk- 
top PC systems. 


1.10.1 System-Management Mode (SMM) 


System-management mode (SMM) provides an additional interrupt and a 
separate address space that can be used for system power management or 
software-transparent emulation of I/O peripherals. SMM is entered using the 
system-management interrupt (SMI#) that has a higher priority than any other 
interrupt. While running in protected SMM address space, the SMI interrupt 
routine can execute without interfering with the operating system or 
application programs. 


After receiving an SMI# interrupt, portions of the CPU state are automatically 
saved, SMM is entered, and program execution begins at the base of SMM 
address space. The location and size of the SMM memory is programmable 
in the Tl486SXL(C) microprocessor family. Seven SMM instructions have 
been added to the 486 instruction set that permit saving and restoring the total 
CPU state when in SMM mode. 


1.10.2 Suspend Mode and Static Operation 


The power-management features in the Tl486SXL(C) family of microproces- 
sors allow a dramatic reduction in the current required when the microproces- 


Power Management 


sor is in suspend mode (typically using less than three percent of the operating 
current). Suspend mode is entered by either a hardware- or a software-initi- 
ated action. Using hardware to initiate suspend mode involves a two-pin hand- 
shake using the SUSP# and SUSPA# signals. 


The software initiates suspend mode through execution of the HALT instruc- 
tion. Once in suspend mode, the microprocessor power consumption can be 
further reduced by stopping the external clock input. 


———————————— OS 


Note: 


For the clock-doubled versions of the TI486SXL(C) microprocessor family, 
suspend mode can be initiated while in clock-doubled mode as long as the 
external input clock is not stopped. The external input clock can be stopped 


after the microprocessor has been put into nonclock-doubled mode. 
| ee) 


Since these microprocessors are static devices, no internal CPU data is lost 
when the clock input is stopped. 


1.10.3 3.3-V Operation 


The TI486SXLC-V and Tl486SXLC2-V versions operate from a 3.3-V supply. 
Power consumed at 3.3 V is typically only 30 percent of the power consumed 
while operating at 5 V. The TI486SXLC-V25 operates at 25-MHz. 


The TI486SXL-V and Tl486SXL2-V versions also operate from a 3.3-V supply. 
Again, power consumed at 3.3 V is typically only 30 percent of the power 
consumed by a microprocessor operating at 5 V. The TI486SXL-V40 can be 
operated in clock-doubled mode at 40-MHz core and 20-MHz bus speeds, or 
it can be operated in nonclock-doubled mode with both the core and bus 
speeds at 40 MHz. The TlI486SXL2-V50 operates at 50 MHz core and 25-MHz 
bus speeds in the clock-doubled mode. 


1.10.4 Mixed 3.3-V and 5-V Operation 


The Tl486SXL-G and Tl486SXL2-G versions operate from both a 3.3-V and 
a 5-V supply. These microprocessors feature 5-V tolerant inputs and outputs, 
which means that they can be incorporated in system designs that utilize both 
3.3-V and 5-V devices. These devices can be used in 3.3-V-only systems by 
connecting the 5-V supply pin (Vccs) to the 3.3-V supply. The microprocessor 
power consumption is typically only 30 percent of the power consumed by a 
microprocessor operating at 5 V. The Tl486SXL-G40 can be operated in 
clock-doubled mode at 40-MHz core and 20-MHz bus speeds, or it can be op- 
erated in nonclock-doubled mode with both the core and bus speeds at 40 
MHz. The TlI486SXL2-G50 operates at 50-MHz core and 25-MHz bus speeds 
in the clock-doubled mode. 
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Chapter 2 


Programming Interface 


In this chapter, the internal operations of the TI486SXL(C) family of micropro- 
cessors are described mainly from an application programmer’s point of view. 
Included in this chapter are descriptions of processor initialization, the register 
sets, memory addressing, various types of interrupts, system-management 
mode, and the shutdown and halt process. Overviews of real, virtual-8086, 
and protected operating modes are also included. 
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Processor Initialization 


2.1 Processor Initialization 
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Each Tl486SXL(C) family microprocessor is initialized when the RESET sig- 
nal is asserted. The processor is placed in real mode and the registers listed 
in Table 2—1 or Table 2—2 are set to their initialized values. RESET invalidates 
and disables the cache and turns off paging. For the clock-doubled versions 
of the TI486SXL(C) microprocessor family, RESET returns the processor to 
the nonclock-doubled mode. When RESET is asserted, the microprocessor 
terminates all local bus activity and all internal execution. During the time that 
RESET is asserted, the internal pipeline is flushed and no instruction execu- 
tion or bus activity occurs. 


Approximately 350 to 450 CLK2 clock cycles (additional 229 + 60 if self-test is 
requested) after negation of RESET, the processor begins executing instruc- 
tions at the top of physical memory (address location FF FFFOh for the 
TI486SXLC series and FFFF FFFOh for the TI486SXL series). When the first 
intersegment JUMP or CALL is executed, address lines A23—A20 for the 
TI486SXLC series or A81—A20 for the TI486SXL series are driven low for 
code-segment-relative memory-access cycles. While these address lines are 
low, the microprocessor executes instructions only in the lowest 1M byte of 
physical address space until system-specific initialization occurs via program 
execution. 


Processor Initialization 


Table 2-1. TlI486SXLC Initialized Register Contents 


Register 
EAX 


EBX 
ECX 
EDX 
EBP 

ESI 

EDI 

ESP 
EFLAGS 
EIP 

ES 


cS 


Ss 
DS 


FS 
GS 
IDTR 
CRO 
CCRO 
CCR1 
ARR1 
ARR2 
ARR3 
ARR4 
DR7 


Register Name 


Accumulator 


Base 

Count 

Data 

Base Pointer 
Source Index 
Destination Index 
Stack Pointer 
Flag Word 
Instruction Pointer 


Extra Segment 


Code Segment 


Stack Segment 


Data Segment 


Extra Segment 

Extra Segment 
Interrupt-Descriptor Table 
Machine Status Word 
Configuration Control 0 
Configuration Control 1 
Address Region 1 
Address Region 2 
Address Region 3 
Address Region 4 
Debug 


Note: x= Undefined value 


Initialized Contents Comments 

XX XXxxh 00 0000h indicates self-test 
passed. 

XX XxXxxh 

XX XXxxh 

xx 0400h + Revision ID Revision ID = 10h 

XX XXxxh 

XX XXxxh 

XX XXxxh 

XX XXxxh 

00 0002h 

00 FFFOh 

0000h Base address set to 00 0000h 
Limit set to FFFFh 

FO0Oh Base address set to 00 0000h 
Limit set to FFFFh 

0000h 

0000h Base address set to 00 0000h 
Limit set to FFFFh 

0000h 

0000h 


Base=0, Limit=3FFh 

00 0010h 

00h 

xx xxx0 (binary) 

000Fh 4G-byte noncacheable region 
0000h 

0000h 

0000h 

00 0000h 
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Table 2-2. TI486SXL Initialized Register Contents 


Register Register Name 

EAX Accumulator 

EBX Base 

ECX Count 

EDX Data 

EBP Base Pointer 

ESI Source Index 

EDI Destination Index 

ESP Stack Pointer 
EFLAGS Flag Word 

EIP Instruction Pointer 

ES Extra Segment 

CS Code Segment 

SS Stack Segment 

DS Data Segment 

FS Extra Segment 

GS Extra Segment 

IDTR Interrupt-Descriptor Table 
CRO Machine Status Word 
CCRO Configuration Control 0 
CCRI1 Configuration Control 1 
ARR1 Address Region 1 
ARR2 Address Region 2 
ARR3 Address Region 3 
ARR4 Address Region 4 
DR7 Debug 
Note: x = Undefined value 
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Initialized Contents Comments 
XXXX XXxxh 
XXXX XXxxh 
XXXX XXxxh 


Xxxx 0421h + Revision ID Revision ID = 10h 


XXXX XXXxh 

XXXX XXXxh 

XXXX XXXxh 

XXXX XXxXxh 

0000 0002h 

0000 FFFOh 

0000h Base address set to 0000 0000h 
Limit set to FFFFh 

FOOOh Base address set to 0000 0000h 
Limit set to FFFFh 

0000h 

0000h Base address set to 0000 0000h 
Limit set to FFFFh 

0000h 

0000h 


Base=0, Limit=3FFh 
0000 0010h 

00h 

XXXX XXXO (binary) 
OO0O0Fh 

0000h 

0000h 

0000h 

0000 0000h 


4G-byte noncacheable region 


0000 0000h indicates self-test passed 
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2.2 Real Mode Versus Protected Mode 


When powered up or reset, the microprocessor is initialized to real mode. Real 
mode establishes conditions that are backward compatible with the 
8086/8088 microprocessors. Addressing capabilities are limited to the range 
that is available on those two microprocessors, and the default operand size 
is 16 bits. 


The microprocessor can be switched from the real mode into protected mode, 
where the extended capabilities of the Tl486SXL(C) are available for use. Pro- 
tected mode provides enhanced memory management capabilities that in- 
clude segment- and page-level protection. 


Table 2-3 provides a comparison of real mode and protected mode. The mi- 
croprocessor is in protected mode when the PE bit in Control register 0 is set. 
After this bit is set, an intersegment JMP is used to load the CS register and 
to flush the instruction-decode pipeline. 


Table 2-3. Comparison of Real Mode and Protected Mode 


Feature 


Physical memory 


Default operand size 


Segment size 


Physical address 


Segment access 


Code privileged 


Real Mode 
Limited to 1M byte. 


Normally 16 bits. 
Fixed at 64K bytes. 
Generated by multiplying the segment reg- 


ister value by 16 and adding an offset to the 
product. 


Attempted access beyond the end of aseg- 
ment is monitored. 


No privileged code. 


Protected Mode 


Limited to 4G bytes. Virtual memory of up 
to 4T bytes is available. 


Can be 16 or 32 bits. 
Variable from 1 byte to 4G bytes. 


Generated by applying paging, if enabled, 
to linear addresses. Linear addresses are 
generated by adding an offset to a value 
calculated from information contained in 
segment descriptors. The value in a seg- 
ment register determines which of several 
possible segment descriptors is used. 


Segments can be given combinations of 
read, write, and execute permissions. At- 
tempted access beyond the end of a seg- 
ment is monitored. 


Code can have one of four privilege levels, 
with some processor instructions restricted 
to the most privileged level. 
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2.3 Instruction-Set Overview 
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The Tl486SXL(C) microprocessor family instruction set can be divided into 
eight types of operations: 


Arithmetic 

Bit manipulation 

Control transfer 

Data transfer 
High-level-language support 
Operating-system support 
Shift/rotate 

String manipulation 


OOUUOUOUUUL 


All instructions operate on as few as zero operands and as many as three op- 
erands. An NOP (no operation) instruction is an example of a zero-operand 
instruction. Two-operand instructions allow the specification of an explicit 
source and destination pair as part of the instruction. These two-operand 
instructions can be divided into eight groups according to operand types: 


Register to register 
Register to memory 
Memory to register 
Memory to memory 
Register to I/O 

I/O to register 

Immediate data to register 
Immediate data to memory 


OCOUUOUOUUULU 


An operand can be held in the instruction itself (as in an immediate operand), 
in a register, in an I/O port, or in memory. An immediate operand is prefetched 
as part of the opcode for the instruction. 


Operand lengths of 8, 16, or 32 bits are supported. Operand lengths of 8 or 
32 bits are generally used when executing code written for 386- or 486-class 
(32-bit code) processors. Operand lengths of 8 or 16 bits are generally used 
when executing 8086 or 80286 code (16-bit code). The default length of an op- 
erand can be overridden by placing one or more instruction prefixes in front 
of the opcode. For example, by using prefixes, a 32-bit operand can be used 
with 16-bit code or a 16-bit operand can be used with 32-bit code. 


Chapter 7, Instruction Set, lists each instruction in the TlI486SXL(C) micropro- 
cessor family instruction set along with the associated opcodes, execution 
clock counts, and effects on the Flag Word register. 
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2.3.1. Lock Prefix 


The LOCK prefix can be placed before certain instructions that read, modify, 
and then write back to memory. The prefix asserts the LOCK# signal to indicate 
to the external hardware that the CPU is inthe process of running multiple, indi- 
visible memory accesses. The LOCK prefix can be used with the following 
instructions: 


lL) Bit test instructions (BTS, BTR, BTC) 

[J Exchange instructions (XADD, XCHG, CMPXCHG) 

[1 One-operand arithmetic and logical instructions 
(DEC, INC, NEG, NOT) 

Lj Two-operand arithmetic and logical instructions 

(ADC, ADD, AND, OR, SBB, SUB, XOR) 


An invalid-opcode exception is generated if the LOCK prefix is used with any 
other instruction or with the above instructions when no write operation to 
memory occurs (i.e., the destination is a register). 


2.3.2 Register Sets 


The TI486SXL(C) microprocessor has 43 accessible registers grouped into 
two sets. The application register set contains the registers frequently used by 
applications programmers. The system register set contains the registers typi- 
cally reserved for use by operating-systems programmers. 


The application register set is made up of: 


Li Eight 32-bit General Purpose registers 
LC) Six 16-bit Segment registers 

[J One 32-bit Flag Word register 

[J One 32-bit Instruction Pointer register 


The system register set is made up of the remaining registers that include: 


Three 32-bit Control registers 

Two 48-bit and two 16-bit System Address registers 

Two 8-bit and four 16-bit (TI486SXLC) or 24-bit (TI486SXL) Configuration 
registers 

Six 32-bit Debug registers 

Five 32-bit Test registers 


Uo OULU 


Each application register is discussed in Section 2.4, Application Register Set, 
page 2-10. 


Each system register is discussed in Section 2.5, System Register Set, page 
2-16. 
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2.3.3 Address Spaces 


The microprocessor can directly address either memory or I/O space. 
Figure 2-1 and Figure 2-2 illustrate the range of addresses available for 
memory address space and I/O address space. 


Figure 2-1. Tl486SXLC Memory and I/O Address Spaces 


Accessible 
Physical Programmed 
Memory Space I/O Space 
FF FFFFh FF FFFFh 
Not 
Accessible 
Physical 
hleriory S000R En <«— Coprocessor 
16M bytes 80 OOF8h Space 
Not 
Accessible 
00 FFFFh 
TI486SXLC 
Configuration 
«_— Register I/O 
00 0000h 00 0000hL_L__ Space 
00 0023h 
00 0022h 


Figure 2-2. Tl486SXL Memory and I/O Address Spaces 


Accessible 
Physical Programmed 
Memory Space I/O Space 
FFFF FFFFh FFFF FFFFh 
Not 
Accessible 
Physical 
Menon 8000 OOFFh < Coprocessor 
4G bytes 8000 OOF8h Space 
Not 
Accessible 
0000 FFFFh 
TI486SXL 
Configuration 
< Register I/O 
0000 0000h 0000 0000hL___ Space 
0000 0023h 
0000 0022h 


2-8 


Instruction-Set Overview 


2.3.3.1 Memory Address Space Range 


For the TI486SXLC series, the addresses for physical memory range between 
00 0000h and FF FFFFh (16M bytes). For the TI486SXL series, the addresses 
for physical memory range between 0000 0000h and FFFF FFFFh (4G bytes). 
Memory address space is accessed as bytes, words (16 bits), or doublewords 
(32 bits). Words and doublewords are stored in consecutive memory bytes 
with the low-order byte located in the lowest address. The physical address 
of a word or doubleword is the byte address of the low-order byte. 


Section 2.6, Memory Address Space, page 2-37, discusses in detail: 

_j} Memory addressing modes that are used to calculate the physical address 

_j Memory management mechanisms, segmentation, and paging that can 
be used to protect address spaces and create an environment that lets a 
small amount of physical memory simulate a large address space. 


2.3.3.2 I/O Address Space Range 


The accessible I/O address space for both the Tl486SXLC and Tl486SXL mi- 
croprocessors ranges between 00 0000h and 00 FFFFh (64K bytes). The co- 
processor communication space for the Tl486SXLC series exists in upper I/O 
space between 80 OOF8h and 80 OOFFh. The coprocessor communication 
space for the TI486SXL series exists in the upper I/O space between 8000 
OOF8h and 8000 OOFFh. These coprocessor I/O ports are automatically ac- 
cessed by the CPU whenever an ESC opcode (IN or OUT I/O instruction) is 
executed. The I/O locations 22h and 23h are used for Configuration register 
access on all versions of the Tl486SXL(C) microprocessors. 


The I/O address space is accessed using IN and OUT instructions pointing to 
addresses that are referred to as ports. The accessible I/O address space is 
64K bytes and can be accessed as 8-bit, 16-bit, or 32-bit ports. The execution 
of any IN or OUT instruction causes M/lO# to be driven low, thereby selecting 
the I/O space instead of memory space for loading or storing data. The upper 
eight address bits of the TI486SXLC processor and the upper sixteen bits of 
the TI486SXL processor are driven low during IN and OUT instruction port ac- 
cesses. 


The microprocessor Configuration registers reside within the I/O address 
space at port addresses 22h and 23h and are accessed using the standard IN 
and OUT instructions. The Configuration registers are modified by writing the 
index of the Configuration register to port 22h and then transferring the data 
through port 23h. Accesses to the on-chip Configuration registers do not gen- 
erate external I/O cycles. However, each port 23h operation must be preceded 
by a port 22h write with a valid index value. Otherwise, the second and later 
port 23h operations are directed off-chip and generate external I/O cycles with- 
out modifying the on-chip Configuration registers. Also, writes to port 22h out- 
side of the microprocessor index range (COh to CFh) result in external I/O 
cycles and do not affect the on-chip Configuration registers. Reads of port 22h 
are always directed off-chip. 
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2.4 Application Register Set 


The Application register set (Figure 2-3) consists of the registers most often 
used by the applications programmer. These registers are generally accessi- 
ble and are not protected from read or write access. 


The contents of General Purpose registers are frequently modified by assem- 
bly language instructions and typically contain arithmetic and logical-instruc- 
tion operands. 


The Segment registers contain segment selectors that index into tables lo- 
cated in memory. These tables hold the base address for each segment and 
other information related to memory addressing. 


The Flag Word register contains control bits used to reflect the status of pre- 
viously executed instructions. This register also contains control bits that affect 
the operation of some instructions. 


The Instruction Pointer is a 32-bit register that points to the next instruction that 
the processor executes. This register is automatically incremented by the pro- 


Figure 2—3. Application Register Set 
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2.4.1. General Purpose Registers 


The General Purpose registers are divided into four Data, two Pointer, and two 
Index registers as shown in Figure 2-4. 


Figure 2-4. General Purpose Registers 


Data Registers 
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Accumulator) 
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Data) 


Pointer and Index Registers 


BP (Base Pointer) 
SP (Stack Pointer) 


SI (Source Index) 


DI (Destination Index) 


2.4.1.1 Data Registers 


The Data registers are used by the applications programmer to manipulate 
data structures and to hold the results of logical and arithmetic operations. Dif- 
ferent portions of the general Data registers can be addressed by using differ- 
ent names. An E prefix identifies the complete 32-bit register. An X suffix with- 
out the E prefix identifies the lower 16 bits of the register. The lower two bytes 
of the register can be addressed with an H suffix to identify the upper byte or 
an L suffix to identify the lower byte. When a source operand value specified 
by an instruction is smaller than the specified destination register, the upper 
bytes of the destination register are not affected when the operand is written 
to the register. 


2.4.1.2 Pointer and Index Registers 


The Pointer and Index registers are: 


BP or EBP Base Pointer 
SP or ESP Stack Pointer 
Sl or ESI Source Index 
DI or EDI Destination Index 


These registers can be addressed as 16- or 32-bit registers, with the E prefix 
indicating 32 bits. These registers can be used as General Purpose registers; 
however, some instructions use a fixed assignment of these registers. For ex- 
ample, the string operations always use ESI as the source pointer, EDI as the 
destination pointer, and ECX as a counter. The instructions using fixed regis- 
ters include double-precision multiply and divide, I/O access, string opera- 
tions, translate, loop, variable shift and rotate, and stack operations. 
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The Tl486SXL(C) processors implement a stack using the ESP register. This 
stack is accessed during the PUSH and POP instructions, procedure calls, 
procedure returns, interrupts, exceptions, and interrupt/exception returns. 
The microprocessor automatically adjusts the value of the ESP during opera- 
tion of these instructions. The EBP register can be used to reference data 
passed onto the stack during procedure calls. Local data can also be placed 
onthe stack and referenced relative to BP. This register provides amechanism 
to access stack data in high-level languages. 


2.4.2 Segment Registers and Selectors 


Segmentation provides a means of defining data structures inside the memory 
space of the microprocessor. There are three basic types of segments: code, 
data, and stack. Segments are used automatically by the processor to deter- 
mine the memory locations of code, data, and stack references. 


There are six 16-bit Segment registers: 


CS Code Segment 

DS Data Segment 

FS Additional Data Segment 
GS Additional Data Segment 
SS Stack Segment 

ES Extra Segment 


In real and virtual-8086 operating modes, a Segment register holds a 16-bit 
segment base. The 16-bit segment base is multiplied by 16, and a 16-bit or 
32-bit offset is then added to it to create a linear address. The offset size is de- 
pendent on the current address size. In real mode and in virtual-8086 mode 
with paging disabled, the linear address is also the physical address. In virtual- 
8086 mode with paging enabled, the linear address is translated to the physi- 
cal address using the current page tables. 


In protected mode, a Segment register holds a segment selector containing 
a 13-bit index, a table indicator (TI) bit, and a two-bit requested-privilege-level 
(RPL) field as shown in Figure 2-5. 


Figure 2-5. Segment Selector Register 


15 


Index Tl RPL 


Tl = Table Indicator 
RPL = Requested Privilege Level 


The index points into a descriptor table in memory and selects one of 8192 
(213) segment descriptors contained in the descriptor table. A segment des- 
criptor is an eight-byte value used to describe a memory segment by defining 
the segment base, the segment limit, and access control information. 


Application Register Set 


To address data within a segment, a 16-bit or 32-bit offset is added to the seg- 
ment’s base address. Once a segment selector has been loaded into a Seg- 
ment register, an instruction needs to specify the offset only. 


The TI bit of the selector defines the descriptor table into which the index 
points. If Tl = 0, the index references the global-descriptor table (GDT). If TI 
= 1, the index references the local-descriptor table (LDT). The GDT and LDT 
are described in more detail later in this chapter. 


The requested privilege level (RPL) field contains a 2-bit segment privilege 
level (00 = most privileged, 11 = least privileged). The RPL bits are used when 
the Segment register is loaded to determine the effective privilege level (EPL). 
If the RPL bits indicate less privilege than the program, the RPL overrides the 
current privilege level (CPL) and the EPL is the lower privilege level. If the RPL 
bits indicate more privilege than the program, the current privilege level over- 
rides the RPL and again the EPL is the lower privilege level. 


When a Segment register is loaded with a segment selector, the segment 
base, the segment limit, and the access rights are also loaded from the des- 
criptor table into a user-invisible or hidden portion of the Segment register (i.e., 
cached on-chip). The CPU does not access the descriptor table again until 
another Segment register load occurs. If the descriptor tables are modified in 
memory, the Segment registers must be reloaded with the new selector val- 
ues. 


The processor automatically selects a default Segment register for memory 
references. Table 2—4 describes the selection rules. In general, data refer- 
ences use the selector contained in the DS register, stack references use the 
SS register, and instruction fetches use the CS register. While some of these 
selections can be overridden, instruction fetches, stack operations, and the 
destination write of string operations cannot be overridden. Special segment 
override prefixes allow the use of alternate Segment registers including the 
ES, FS, and GS Segment registers. 


Table 2-4. Segment Register Selection Rules 


Implied (Default) Segment Override 
Type of Memory Reference Segment Prefix 
Code fetch CS None 
Destination of PUSH, PUSHF, INT, CALL, PUSHA Ss None 
instructions 
Source of POP, POPA, POPF, IRET, RET instructions Ss None 
Destination of STOS, MOVS, REP STOS, REP ES None 
MOVS instructions 
Other data references with effective address using 
Base registers of: 
EAX, EBX, ECX, EDX, ESI, EDI DS CS, ES, FS, GS, SS 
EBP, ESP Ss CS, DS, ES, FS, GS 
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2.4.3 Instruction Pointer Register 


The (extended) Instruction Pointer (EIP) register shown in Figure 2-3 on page 
2-10 contains the offset into the current code segment of the next instruction 
to be executed. The register is normally incremented with each instruction 
execution unless implicitly modified through an interrupt, exception, or an 
instruction that changes the sequential execution flow (e.g., jump, call). 


2.4.4 Flag Word Register 


The Flag Word register, EFLAGS, contains status information and controls 
certain operations on the microprocessor. The lower 16 bits of this register are 
referred to as the Flag register, FLAGS, that is used when executing 8086 or 
80286 code. The flag bits are shown in Figure 2-6 and defined in Table 2-5. 


Figure 2-6. EFLAGS Register 
EFLAGS 


FLAGS 


Alignment Check cS) 
Virtual-8086 Mode S 
Resume Flag D 
Nested Task Flag S 
I/O Privilege Level S 
Overflow A 

Direction Flag Cc 
Ss 

D 

A 

A 

Ss 

A 

A 


Interrupt Enable 
Trap Flag 

Sign Flag 

Zero Flag 
Auxiliary Carry 
Parity Flag 
Carry Flag 


Note: A = arithmetic flag, D = debug flag, S = system flag, C = control flag 
0 or 1 indicates reserved 
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Table 2-5. EFLAGS Definitions 


Bit Position 
0 


10 


11 


12,13 


14 


16 


17 


18 


Name 
CF 


PF 


AF 


ZF 
SF 


TF 


DF 


OF 


IOPL 


NT 


RF 


VM 


AC 


Function 


Carry flag. CF is set when an operation results in a carry out of (addition) or borrow 
into (subtraction) the most significant bit; otherwise, CF is cleared. 


Parity flag. PF is set when the low-order eight bits of the result contain an even 
number of ones; otherwise, PF is cleared. 


Auxiliary carry flag. AF is set when an operation results in a carry out of (addition) 
or borrow into (subtraction) bit position 3; otherwise, AF is cleared. 


Zero flag. ZF is set if result is zero; otherwise, ZF is cleared. 


Sign flag. SF is set equal to high-order bit of result (0 indicates positive, 1 indicates 
negative). 


Trap enable flag. Once TF is set, a single-step interrupt occurs after the next 
instruction completes execution. TF is cleared by the single-step interrupt. 


Interrupt enable flag. When IF is set, maskable interrupts (INTR input pin) are 
acknowledged and serviced by the CPU. 


Direction flag. When cleared, DF causes string instructions to auto-increment 
(default) the appropriate Index registers (ESI and/or EDI). Setting DF causes 
auto-decrement of the Index registers. 


Overflow flag. Set if the operation resulted in a carry or borrow into the sign bit of 
the result but did not result in a carry or borrow out of the high-order bit. Also set if 
the operation resulted in a carry or borrow out of the high-order bit but did not result 
in a carry or borrow into the sign bit of the result. 


I/O privilege level. While executing in protected mode, IOPL indicates the 
maximum current privilege level (CPL) permitted to execute I/O instructions without 
generating an exception 13 fault or consulting the I/O permission bit map. IOPL also 
indicates the maximum CPL allowing alteration of the IF bit when new values are 
popped into the EFLAGS register. 


Nested task. While executing in protected mode, NT indicates that the execution 
of the current task is nested within another task. 


Resume flag. RF is used in conjunction with Debug register breakpoints. RF is 
checked at instruction boundaries before breakpoint exception processing. If set, 
any debug fault is ignored on the next instruction. 


Virtual-8086 mode flag. If VM is set while in protected mode, the microprocessor 
switches to virtual-8086 operation handling segment loads as the 8086 does, but 
generating exception 13 faults on privileged opcodes. The VM flag can be set by 
the IRET instruction (if current privilege level = 0) or by task switches at any privilege 
level. 


Alignment-check enable. In conjunction with the AM flag in CRO, the AC flag 
determines whether or not misaligned accesses to memory cause a fault. If AC is 
set, alignment faults are enabled. 
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2.5 System Register Set 


The System register set (Figure 2—7) consists of registers typically used by 
system-level programmers who generate operating systems and memory- 
management programs. 


The Control registers control functions of the microprocessor such as paging, 
coprocessor functions, and segment protection. When paging is enabled and 
a paging exception occurs, the Control registers retain the linear address of 
the access that caused the exception. 


The Descriptor Table registers and the Task register are referred to as System 
Address or Memory Management registers. These registers consist of two 
48-bit and two 16-bit registers. These registers specify the location of the data 
structures that control the segmentation used by the microprocessor. Seg- 
mentation is a method of memory management. 


The Configuration registers control the clock-doubling operation (for the 
Tl486SXLC2 and TI486SXL2), on-chip cache operation, power-management 
features, and system-management mode. The clock-doubling, cache, power- 
management, and SMM features can be enabled or disabled by writing to 
these registers. Noncacheable areas of physical memory are also defined 
through these registers. 


The Debug registers provide debugging facilities for the microprocessor and 
enable the use of data-access breakpoints and code-execution breakpoints. 


The Test registers provide a mechanism to test the contents of both the on-chip 
8K-byte cache and the translation lookaside buffer (TLB). The TLB is used as 
a cache for translating linear addresses to physical addresses when paging 
is enabled. In the following sections, the System register set is described in 
greater detail. 
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Figure 2—7. System Register Set 
31 16 15 0 


CRO 


Control 


Page-Fault Linear Address Register CR2 ; 
Registers 


Page-Directory Base Register CR3 


47 16 15 0 
Base Limit GDTR 


System Address 
(Descriptor Table) 
Registers 


Base Limit IDTR 
Selector LDTR 


System Address 
(Task Register) 


Selector TR 


7 0 


CCRO | CCRO 
23 15 CCR1 CCR1 
Address Region 1 ARR1 Configuration 
Address Region 2 ARR2 Registers 
Address Region 3 ARR3 


Address Region 4 ARR4 
31 (TI486SXL only) , 


Linear Breakpoint Address 0 DRO 
Linear Breakpoint Address 1 DR1 


Linear Breakpoint Address 2 DR2 


Debug 


Linear Breakpoint Address 3 DR3 Registers 


Breakpoint Status DR6 


Breakpoint Control DR7 


31 0 
Cache Test TR3 


Cache Test TR4 
Cache Test TR5 
TLB Test Control TR6 
TLB Test Status TR7 


Test 
Registers 


CCRO = Configuration Control 0 
CCR1 = Configuration Control 1 
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2.5.1 


Control Registers 


The Control registers (CRO, CR2, and CR3) are shown in Figure 2-8. The CRO 
register contains system control flags that control operating modes and indi- 
cate the general state of the CPU. The lower 16 bits of CRO are referred to as 
the machine status word (MSW). The CRO bit definitions are described in 
Table 2-6. The reserved bits in CRO should not be modified. 


Figure 2-8. Control Registers 


31 


12 11 0 


Page-Directory Base Register (PDBR) CR3 


Page-Fault Linear Address CR2 


= Reserved 


CRO 


When paging is enabled and a page fault is generated, the CR2 register retains 
the 32-bit linear address of the address that caused the fault. CR3 contains the 
20-bit base address of the page directory. The page directory must always be 
aligned to a 4K-byte page boundary; therefore, the lower 12 bits of CR3 are 
reserved. 


When the microprocessor operates in protected mode, any program can read 
the Control registers. Privilege level 0 (most privileged) programs can modify 
the contents of these registers. 
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Table 2-6. CRO Bit Definitions 


Bit Position 
0 


31 


Name 
PE 


MP 


EM 
TS 


CD 


PG 


Function 


Protected mode enable. Enables the segment-based protection mechanism. If PE = 
1, protected mode is enabled. If PE = 0, the CPU operates in real mode 
(segment-based protection disabled), and addresses are formed as in an 8086-class 
CPU. 


Monitor processor extension. If MP = 1 and TS = 1, a WAIT instruction causes fault 
7. The TS bit is set to 1 on task switches by the CPU. Floating-point instructions are 
not affected by the state of the MP bit. The MP bit should be set to 1 during normal 
operations. 


Emulate processor extension. If EM = 1, all floating-point instructions cause a fault 7. 


Task switched. Set whenever a task-switch operation is performed. Execution of a 
floating-point instruction with TS = 1 causes a device-not-available (DNA) fault. If 
MP = 1 and TS = 1, a WAIT instruction also causes a DNA fault. 


Reserved. Do not modify. 
Reserved. Do not modify. 


Write protect. Protects read-only pages from supervisor write access. The 386-type 
CPU allows aread-only page to be written from privilege levels O—2. The TI486SXL(C) 
CPU is compatible with the 386-type CPU when WP = 0. WP = 1 forces a fault ona 
write to a read-only page from any privilege level. 


Alignment-check mask. If AM = 1, the AC bit in the EFLAGS register is unmasked and 
allowed to enable alignment-check faults. Setting AM = 0 prevents AC faults. 


Reserved. Do not modify. 


Cache disable. If CD = 1, cache is no longer filled. However, data already present in 
the cache continues to be used if the requested address hits in the cache. The cache 
must also be invalidated to completely disable any cache activity. 


Paging enable. If PG = 1 and protected mode is enabled (PE = 1), paging is enabled. 


2.5.2 Descriptor-Table Registers and Descriptors 


The Global-, Interrupt-, and Local-Descriptor-Table registers (GDTR, IDTR 
and LDTR) specify the location of the data structures that control segmented 
memory management. 


2.5.2.1 Descriptor-Table (System-Address) Registers 


The GDTR, IDTR, and LDTR, shown in Figure 2-9, are loaded using the 
LGDT, LIDT, and LLDT instructions, respectively. The values of these registers 
are stored using the corresponding store instructions. The GDTR and IDTR 
load instructions are privileged instructions when operating in protected mode. 
The LDTR can be accessed only in protected mode. 


The Global-Descriptor-Table register (GDTR) holds a 32-bit base address and 
a 16-bit limit for the global-descriptor table (GDT). The GDT is an array of up 
to 8192 8-byte descriptors. When a Segment register is loaded from memory, 
the TI bit in the segment selector chooses either the GDT or the local-descrip- 
tor table (LDT) to locate a descriptor. If Tl = 0, the index portion of the selector 
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is used to locate a given descriptor within the GDT table. The contents of the 
GDTR are completely visible to the programmer. The first descriptor in the 
GDT (location 0) is not used by the CPU andis referred to as the null descriptor. 
If the GDTR is loaded while operating in 16-bit operand mode, the micropro- 
cessor accesses a 32-bit base value but the upper 8 bits are ignored, resulting 
in a 24-bit base address. 


The Interrupt-Descriptor-Table register (IDTR) holds a 32-bit base address 
and a 16-bit limit for the interrupt-descriptor table (IDT). The IDT is an array 
of 256 8-byte interrupt descriptors, each of which points to an interrupt service 
routine. Every interrupt that can occur in the system must have an associated 
entry in the IDT. The contents of the IDTR are completely visible to the pro- 
grammer. 


Figure 2-9. Descriptor- Table (System-Address) Registers 


4 


2-20 


8 
Base Address 


ss 


16 15 0 


GDTR 
IDTR 


LDTR 


The Local-Descriptor-Table register (_.DTR) holds a 16-bit selector for the lo- 
cal-descriptor table (LDT). The LDT is an array of up to 8192 8-byte descrip- 
tors. When the LDTR is loaded, the LDTR selector indexes an LDT descriptor 
that must reside in the global-descriptor table (GDT). The contents of the se- 
lected descriptor are cached on-chip in the hidden portion of the LDTR. The 
CPU does not access the GDT again until the LDTR is reloaded. If the LDT 
description is modified in memory in the GDT, the LDTR must be reloaded to 
update the hidden portion of the LDTR. 


When a Segment register is loaded from memory, the TI bit in the segment se- 
lector chooses either the GDT or the LDT to locate a segment descriptor. If 
TI = 1, the index portion of the selector is used to locate a given descriptor with- 
in the LDT. Each task in the system may be given its own LDT, managed by 
the operating system. The LDTs provide a method for isolating a given task’s 
segments from other tasks in the system. 
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2.5.2.2 Descriptors 
The three types of descriptors are: 


Lj) Application-segment descriptors that define code, data, and stack seg- 
ments 


L1 System-segment descriptors that define an LDT segment or a task-state 
segment (TSS) 


1 Gate descriptors that define task gates, interrupt gates, trap gates, and 
call gates 


Application-segment descriptors can be located in either the LDT or GDT. Sys- 
tem-segment descriptors can be located only in the GDT. Depending on the 
gate type, gate descriptors can be located in the GDT, LDT, or IDT. Figure 2-10 
illustrates the descriptor format for both application-segment descriptors and 
system-segment descriptors. Table 2—7 lists the corresponding bit definitions. 


Figure 2-10. Application- and System-Segment Descriptors 
31 24 23 22 21 20 19 1615 141312 11 8 7 0 


Base 31-24 Limit 19-16 Base 23-16 


Base 15-0 Limit 15-0 
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Table 2—7.Segment Descriptor Bit Definitions 


Bit 
Position 


31-24 
7-0 
31-16 


19-16 
15-0 


23 


22 


14-13 


2-22 


Memory 
Offset 


+4 
+4 
+0 


+4 
+0 


+4 


+4 


+4 
+4 
+4 
+4 


+4 


+4 


+4 


+4 


+4 


Name Description 


Base 31-24 Segment base address. A 32-bit linear address that points to the be- 
Base 23-16 ginning of the segment. 
Base15—0 


Limit 19-16 Segment limit. In real mode, segment limit is always 64K bytes 
Limit 15-0 | (OFFFFh). 


G Limit granularity: 
0 = byte granularity 
1 = 4K-byte (page) granularity 


D Default length for operands and effective addresses (valid for code 
and stack segments only): 
O = 16 bit 
1 = 32 bit 
AVL Segment available 
P Segment present 
DPL Descriptor privilege level 
DT Descriptor type: 
0 = system 


1 = application 


Type Segment type. System descriptor (DT = 0): 
0010 = LDT descriptor 
1001 = TSS descriptor, task not busy 
1011 = TSS descriptor, task busy 


E Application descriptor (DT = 1): 
0 =data 
1 = executable 

C/D If Eis 0: 


0 = expand up, limit is upper bound of segment 
1 = expand down, limit is lower bound of segment 
If Eis 1: 
0 = nonconforming 
1 = conforming (runs at privilege level of calling procedure) 
R/W If E is 0: 
0 = nonreadable 


1 = readable 
lf Eis 1: 
0 = nonwritable 
1 = writable 
A 0 = not accessed 
1 = accessed 


Gate descriptors provide protection for executable segments operating at dif- 
ferent privilege levels. Figure 2—11 illustrates the format for gate descriptors 
and Table 2-8 lists the corresponding bit definitions. 


Task-gate descriptors are used to switch the CPU’s context during a task 
switch. The selector portion of the task-gate descriptor locates a task-state 
segment. Task-gate descriptors can be located in the GDT, LDT, or IDT. 


Figure 2-11. Gate Descriptor 
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16 15 141312 11 8 7 0 


Selector 15-0 


Offset 15-0 


Table 2-8. Gate Descriptor Bit Definitions 


Bit 
Position 


31-16 
15-0 


31-16 
15 
14-13 
11-8 


+4 
+0 


+0 
+4 
+4 
+4 


+4 


Memory 
Offset Name 


Offset 31-16 
Offset 15-0 


Selector 15-0 


Parameters 


Description 


Offset used during a call gate to calculate the branch target 


Segment selector used during a call gate to calculate the branch target 
Segment present 
Descriptor privilege level 


Segment type: 

0100 = 16-bit call gate 
0101 = tack gate 

0110 = 16-bit interrupt gate 
0111 = 16-bit trap gate 
1100 = 32-bit call gate 
1110 = 32-bit interrupt gate 
1111 = 32-bit trap gate 


Number of 32-bit parameters to copy from the caller’s stack to the 
called procedure’s stack 


Interrupt-gate descriptors are used to enter a hardware interrupt service rou- 
tine. Trap-gate descriptors are used to enter exceptions or software interrupt 
service routines. Trap-gate and interrupt-gate descriptors can be located only 


in the IDT. 


Call-gate descriptors are used to enter a procedure (subroutine) that executes 
at the same or a more-privileged level. A call-gate descriptor primarily defines 
the procedure entry point and the procedure’s privilege level. 


2.5.3 Task Register 


The Task register (TR) holds a 16-bit selector for the current TSS table as 
shown in Figure 2-12. The TR is loaded and stored via the LTR and STR 
instructions, respectively. The TR can be accessed only during protected 
mode and can be loaded only when the privilege level is 0 (most privileged). 


Figure 2-12. Task (System-Address) Register 


15 0 


Selector 
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When the TR is loaded, the TR selector field indexes a TSS descriptor that 
must reside in the global-descriptor table (GDT). The contents of the selected 
descriptor are cached on-chip in the hidden portion of the TR. 


During task switching, the processor saves the current CPU state in the TSS 
before starting a new task. The TR points to the current TSS. The TSS can be 
either a 386/486-type TSS (32-bit) or a 286-type TSS (16-bit) as shown in 
Figure 2-13 and Figure 2-14. An I/O permission bit map is referenced in the 
32-bit TSS by the I/O map base address. 


Figure 2-13. 32-Bit Task-State Segment (TSS) Table 


31 16 15 0 
I/O Map Base Address 0000000000000 0 O| T} +64h 
000000000000000 0 Selector For Task’s LDT +60h 
0000000000000 000 GS +5Ch 
0000000000000 000 FS +58h 
0000000000000 000 DS +54h 
0000000000000 000 SS +50h 
0000000000000000 CS +4Ch 
0000000000000 000 ES +48h 
EDI +44h 
ESI +40h 
EBP +3Ch 
ESP +38h 
EBX +34h 
EDX +30h 
ECX +2Ch 
EAX +28h 
EFLAGS +24h 
EIP +20h 
CR3 +1Ch 
0000000000000 000 SS for CPL = 2 +18h 
ESP for CPL = 2 +14h 
0000000000000 000 SS for CPL = 1 +10h 
ESP for CPL = 1 +Ch 
0000000000000 000 SS for CPL = 0 +8h 
ESP for CPL = 0 +4h 
0000000000000 0 00 Back Link (Old TSS Selector) +0h 


0 = Reserved 


2-24 


Figure 2-14. 16-Bit Task-State Segment (TSS) Table 
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+2Ah 


+28h 


+26h 


+24h 


+22h 


+20h 


+1Eh 


+1Ch 


+1Ah 


+18h 


+16h 


414h 


+12h 
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+8h 


+6h 


+4h 


+2h 
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2.5.4 Configuration Registers 


The T1486SXL(C) family microprocessors contain six registers that do not ex- 
iston other 80x86 microprocessors. These registers include two Configuration 
Control registers (CCRO and CCR1) and four Address Region registers (ARR1 
through ARR&4) as listed in Table 2-9 and Table 2-10. The CCR and ARR reg- 
isters exist in |/O memory space and are selected by a register index number 
via I/O port 22h. I/O port 23h is used for data transfer. 


Table 2-9. TI486SXLC Configuration Control Registers 


Register Name Register Index Width 
Configuration Control 0 (CCRO) COh 8 
Configuration Control 1 (CCR1) Cth 8 
Address Region 1 (ARR1) C5h—Cé6h 16 
Address Region 2 (ARR2) C8h-—C9h 16 
Address Region 3 (ARR3) CBh-—CCh 16 
Address Region 4 (ARR4) CEh-CFh 16 


Note: The following register index numbers are reserved: C2h, C3h, C4h, C7h, CAh, CDh, and 
DOh through FFh. 


Table 2-10. Tl486SXL Configuration Control Registers 


2-26 


“RegisterName = ~—~—~—«s*RegisterIndex =~ Width 
Configuration Control 0 (CCRO) COh 8 
Configuration Control 1 (CCR1) Cth 8 
Address Region 1 (ARR1) C4h-C6h 24 
Address Region 2 (ARR2) C7h-—C9h 24 
Address Region 3 (ARR3) CAh-—CCh 24 
Address Region 4 (ARR4) CDh-CFh 24 


Note: The following register index numbers are reserved: C2h, C3h, and DOh through FFh. 


Each I/O port 23h data transfer must be preceded by an I/O port 22h register 
selection; otherwise, the second and later I/O port 23h operations are directed 
off-chip and produce external I/O cycles. If the register index number is outside 
the COh—CFh range, external I/O cycles also occur. 
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The CCRO register (Table 2-11) determines if the 64K-byte memory area on 
1M-byte boundaries and the 640K-byte to 1M-byte area are cacheable. This 
register also enables certain functions associated with cache control, suspend 
mode, and the clock-doubled mode. 


Table 2-11. CCRO Bit Definitions 


Bit Position 
0 


Register Index Description 


NCO Noncacheable 1M-byte boundaries: 
If 1, sets the first 64K bytes at each 1M-byte boundary as noncacheable. 


NC1 Noncacheable upper memory area: 
If 1, sets 640K-byte to 1M-byte memory region noncacheable. 


A20M Enable A20M# pin: 
If 1, enables A20M#; otherwise pin is ignored. 


KEN Enable KEN# pin: 
If 1, enables KEN#; otherwise pin is ignored. 


FLUSH Enable FLUSH# pin: 
If 1, enables FLUSH#; otherwise pin is ignored. 


BARB Enable cache flush during hold: 
If 1, enables flushing of the internal cache when hold state is entered. 


CKD Enable clock double: 
If 1, enables clock-double mode. 
If 0, disables clock-double mode. 


SUSP Enable suspend pins: 


If 1, enables SUSP# and SUSPA#. 
If 0, SUSPA# floats; SUSP# is ignored. 
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The CCR1 register (Table 2-12) sets up the internal cache operation and sys- 
tem-management mode (SMM). The ARR registers (Figure 2-15 on page 
2-29, Figure 2-16 on page 2-30, and Table 2—9 and Table 2-10 on page 2-26) 
define the location and size of the memory regions associated with the internal 
cache. ARR1—ARR3 define three write-protected or noncacheable memory 
regions as designated by CCR1 bits WP1—WP3. ARR4 defines an SMM 
memory space as a noncacheable memory region when bit SM4 of CCR1 is 
setto 1. Other CCR1 bits enable SMM pins and control SMM memory access. 
The SMAC bit allows access to defined SMM space while notin an SMI service 
routine. The MMAC bit allows access to main memory that overlaps with SMM 
memory while in an SMI service routine for data access only. 


Table 2-12.CCR1 Bit Definitions 


Bit Position 


2-28 


0 
1 


Register Index Description 


SMAC 


MMAC 


WP1 


WP2 


WP3 


SM4 


Reserved 


Enable SMM pins: 
If 1, SMl# and SMADS# are enabled. 
If 0, SMI# is ignored and SMADS# floats. 


System management memory access: 

If 1, noncode-segment prefixed data reads and writes to addresses within 
the SMM memory space cause external bus cycles to be issued with 
SMADS# active. SMI# is ignored. 

If 0, no effect on access. 


Main memory access: 

If 1, all noncode-segment prefixed data reads and writes that occur within 
an SMI service routine (or when SMAC = 1) access main memory instead 
of SMM memory space. 

If 0, no effect on access. 


Access region 1 control: 
If 1, region 1 is write protected and cacheable. 
If 0, region 1 is noncacheable. 


Access region 2 control: 
If 1, region 2 is write protected and cacheable. 
If 0, region 2 is noncacheable. 


Access region 3 control: 
If 1, region 3 is write protected and cacheable. 
If 0, region 3 is noncacheable. 


Access region 4 control: 
If 1, region 4 is noncacheable SMM memory space. 
If 0, region 4 is noncacheable. SMI# input ignored. 
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The ARR registers define address regions using a starting address and a block 
size. The noncacheable-region block sizes range from 4K bytes to 4G bytes 
(Table 2—13). A block size of zero disables the address region. The starting ad- 
dress of the address region must be on a block size boundary. For example, 
a 128K-byte block is allowed to have a starting address of OK bytes, 128K 
bytes, 256K bytes, etc. The SMM memory region size is restricted to a maxi- 
mum of 16M bytes. The block size must be defined for SMI# to be recognized. 


Figure 2-15. Tl486SXLC Address Region Registers (ARR1—ARR4) 
Register Index = C5h Register Index = C6h 


Starting Address 
Al 


6 A15 
Address Region 1 
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TARR4 (Size) must be 4K bytes to 16M bytes if ARR4 is defined as SMM memory space. 
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Figure 2-16. Tl486SXL Address Region Registers (ARR1—ARR4) 


Register Index = C4h Register Index = C5h Register Index = C6h 
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Starting Address ARR4 
A23 


Address Region 4 


TARR4 (Size) must be 4K bytes to 16M bytes if ARR4 is defined as SMM memory space. 


Table 2—13.ARR1—ARR¢4 Block Size Field 


Bits 3-0 Block Size (Bytes) Bits 3-0 Block Size (Bytes) 

Oh Disabled 8h 512K 

th 4K 9h 1M 

2h 8K Ah 2M 

3h 16K Bh 4M 

4h 32K Ch 8M 

5h 64K Dh 16M 

6h 128K Eh 32M 

7h 256K Fh 4G 
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2.5.5 Debug Registers 


Six Debug registers (DRO—DR3, DR6, and DR7), shown in Figure 2-17 and 
Figure 2-18, support debugging on the TI486SXL(C) family of microproces- 
sors. Memory addresses loaded in the Debug registers, referred to as break- 
points, generate a debug exception when a memory access of the specified 
type occurs to the specified address. A breakpoint can be specified for a partic- 
ular kind of memory access such as a read or a write. Code and data break- 
points can also be set allowing debug exceptions to occur whenever a given 
data access (read or write) or code access (execute) occurs. The size of the 
debug target can be set to 1, 2, or 4 bytes. The Debug registers are accessed 
via MOV instructions that can be executed only at privilege level 0. 


Figure 2-17. Tl486SXLC Debug Registers 


33222222222 21%11%1 «4141 «42 

1098 765432109876 «5432098 7:65 4 32 1 «+0 

LEN | R/W| LEN | R/W | LEN | R/W | LEN | R/W 00 G 001 G|L|JG/L|G/LIGIJL |GJL DR7 
3 3 2 2 1 1 0 0 D EJE}3/3 }2/;2}1 41 |0 J0 
B|B B|B/B/B 

11114141 11 «41 DR 

0000000 0000 00 000)+F/.6)0/0 3/211 10 6 

Reserved DR5 

Reserved DR4 

Breakpoint 3 Linear Address DR3 

Breakpoint 2 Linear Address DR2 

Breakpoint 1 Linear Address DR1 

Breakpoint 0 Linear Address DRO 


All bits marked as 0 or 1 are reserved and should not be modified. 


The Debug Breakpoint Linear Address registers DRO—DR3 each contain the 
linear address for one of four possible breakpoints. Each breakpoint is further 
specified by bits in the Debug Control register (DR7). For each breakpoint ad- 
dress in DRO—DR3, there are corresponding fields L, R/W, and LEN in DR7 
that specify the type of memory access associated with the breakpoint. 


The R/W field can be used to specify execution as well as data-access break- 
points. Instruction-execution and data-access breakpoints are always taken 
before execution of the instruction that matches the breakpoint. 


The Debug Status register (DR6) reflects conditions that were in effect at the 
time the debug exception occurred. The contents of the DR6 register are not 
automatically cleared by the processor after a debug exception occurs and, 
therefore, should be cleared by software at the appropriate time. Table 2-14 
lists the field definitions for the DR6 and DR7 registers. 
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Figure 2-18. TI486SXL Debug Registers 


332222222222%1%111 13111441 ~«~4' 
1098765432%10987¢6 «5432098 76 5 4 8 1 0 
LEN | R/W | LEN} R/W | LEN | R/W | LEN | RAW G G|L|G|L|G/L/G GIL 
a |3 [2 2) 4 | 4 | 6 |e | Ooo etre Ela la i2l244 4/0 [a |ORZ 
B|B B/B|B/B 
00000000 00 0000 0 O0jF)5)/1,)011 1 1 111 1 3 ]o}4 | 9 (PRE 
Breakpoint 3 Linear Address DR3 
Breakpoint 2 Linear Address DR2 
Breakpoint 1 Linear Address DRI1 
Breakpoint 0 Linear Address DRO 
All bits marked as 0 or 1 are reserved and should not be modified. 
Table 2-14. DR6 and DR7 Field Definitions 
Number 
Register Field Of Bits Description 
DR6 Bi 1 Bi is set by the processor if the conditions described by DRi, R/Wi, and 
LENi occurred when the debug exception occurred, even if the breakpoint 
is not enabled via the Gi or Li bits. 
BT 1 BT is set by the processor before entering the debug handler if a task 
switch has occurred to a task with the T bit in the TSS set. 
BS 1 BS is set by the processor if the debug exception was triggered by the 


single-step-execution mode (TF flag in EFLAGS set). 


DR7 R/Wi 2 Break applied to the DRi Breakpoint Linear Address register: 
00 — Break on instruction execution only 
01 — Break on data writes only 
10 — Not used 
11 — Break on data reads or writes 


LENi 2 Length of the DRi Breakpoint Linear Address register: 
00 — One-byte length 
01 — Two-byte length 
10 — Not used 
11 — Four-byte length 


Gi 1 If set to 1, breakpoint in DRi is globally enabled for all tasks and is not 
cleared by the processor as the result of a task switch. 


Li 1 If set to 1, breakpoint in DRi is locally enabled for the current task and is 
cleared by the processor as the result of a task switch. 


GD 1 Globally disables Debug register access. GD bit is cleared whenever a 
debug exception occurs. 


Code execution breakpoints can also be generated by placing the breakpoint 
instruction (INT3) at the location where control is to be regained. The single- 
step feature can be enabled by setting the TF flag in the EFLAGS register. This 
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causes the processor to perform a debug exception after the execution of 
every instruction. 


2.5.6 Test Registers 


The five Test registers, shown in Figure 2-19, test the CPU’s translation look- 
aside buffer (TLB) and on-chip cache. TR6 and TR7 are used for TLB testing, 
and TR3—TR&® are used for cache testing. Table 2-15 and Table 2-16 list the 
bit definitions for the TR6 and TR7 registers. 


Figure 2-19. Test Registers 


TLB Physical Address PCD |PWT|TLB LRU} 0 O /|PL| REP | 0 O | TR7 

31 12 11 10 9 8 7 6 5 4 3 2 1 #0 
TLB Linear Address V D | D#|/U) U#]}R |R#)/0 O O OO} C|TRE 

31 12 11 109 8 765 4 3 2 1 

SEL Set Selection il ctl | TRS 

31 12 11109 8 7 6 5 4 3 2 1 #0 

7 Valid —-~~ 

Cache Tag Addresst vests Bits BLK) 0 0/|TR4 

31 24 12 11 9 8 7 6 5 4 3 2 1 +0 
Cache Data TR3 

31 0) 

= Reserved 


T Bits 31-24 are reserved on the TI486SXLC. 


2.5.6.1 TLB Test Registers 


The microprocessor TLB is a four-way set-associative memory with eight en- 
tries per set. Each TLB entry consists of a 24-bit tag and 20-bit data. The 24-bit 
tag represents the high-order 20 bits of the linear address, a valid bit, and three 
attribute bits. The 20-bit data portion represents the upper 20 bits of the physi- 
cal address that corresponds to the linear address. 


The TLB Test-Control register (TR6) contains a command bit, the upper 20 bits 
of a linear address, a valid bit, and the attribute bits used in the test operation. 
The contents of TR6 are used to create the 24-bit TLB tag during both write 
and read (TLB lookup) test operations. The command bit defines whether the 
test operation is a read or a write. 


The TLB Test-Data register (TR7) contains the upper 20 bits of the physical 
address (TLB data field), two LRU bits, and a control bit. During TLB write op- 
erations, the physical address in TR7 is written into the TLB entry selected by 
the contents of TR6. During TLB lookup operations, the TLB data selected by 
the contents of TR6 is loaded into TR7. 
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Table 2-15. TR6 and TR7 Bit Definitions 


Register 
Name 


TR6 


TR7 


Bit 
Position 
31-12 


11 


31-12 


11 


10 


Description 


Linear address: 

TLB lookup. The TLB is interrogated per this address. If only one match occurs 
in the TLB, the rest of the fields in TR6 and TR7 are updated according to the 
matching TLB entry. 

TLB write. A TLB entry is allocated to this linear address. 


Valid bit (V): 

TLB lookup. Always set to 1. 

TLBwrite. Ifset, indicates that the TLB entry contains valid data. If clear, target entry 
is invalidated. 


Dirty attribute bit and its complement (D, D#). (Refer to Table 2-16.) 
User/supervisor attribute bit and its complement (U, U#). (Refer to Table 2-16.) 
Read/write attribute bit and its complement (R, R#). (Refer to Table 2-16.) 


Command bit (C): 
If0, TLB write 
If 1, TLB lookup 


Physical address: 
TLB lookup. Data field from the TLB. 
TLB write. Data field written into the TLB. 


Page-level cache disable bit (PCD). Corresponds to the PCD bit of a page-table 
entry. 


Page-level cache write-through bit (PWT). Corresponds to the PWT bit of a 
page-table entry. 


LRU bits: 
TLB lookup. LRU bits associated with the TLB entry prior to the TLB lookup 
TLB write. ignored 


PL bit: 

TLB lookup. If 1, read hit occurred. If 0, read miss occurred. 

TLB write. If 1, REP field is used to select the set. If 0, the pseudo-LRU replacement 
algorithm is used to select the set. 


Set selection (REP): 
TLB lookup. If PL is 1, set in which the tag was found. If PL is 0, undefined data. 
TLB write. If PLis 1, selects one of the four sets for replacement. If PL is 0, ignored. 


Table 2-16. TR6 Attribute Bit Pairs 


2-34 


Bit (B) Bit Complement (B#) Effecton TLB Lookup Effect on TLB Write 


0 0 Do not match Undefined 
0 1 Match if the bit is 0 Clear the bit 
1 0 Match if the bit is 1 Set the bit 
1 1 Match if the bit is 1 or0 Undefined 
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2.5.6.2 Cache Test Registers 


The microprocessor on-chip cache is 8K bytes in size and is configured as two- 
way set-associative memory. 


The cache memory is physically split into two 4K-byte blocks each containing 
1024 lines. Associated with each 4K-byte block are 256 twenty-bit tags, which 
implies four lines in a block that are associated with the same tag. These four 
lines are consecutive at 16-byte boundaries. For each byte ina line, a valid bit 
indicates which of the four data bytes actually contains valid data. In addition, 
there is a valid bit associated with each block of four lines, which when reset, 
indicates that none of the 16-bytes in the four lines of that block contain valid 
data. 


The LRU bit indicates which of the two sets was more recently accessed. The 
LRU bit is uninitialized for a given set after RESET or FLUSH#. The set’s LRU 
bit remains uninitialized until the first read allocation to that set occurs. The first 
cache allocation to a given set is to way 1 and the LRU bit is then equal to 1. 
In a similar manner, the tag and valid bits of a given set and way are uninitial- 
ized until a read allocation occurs and the block valid bit is set. 


The microprocessor contains three Test registers that allow testing of its inter- 
nal cache. Using these registers, cache test writes and reads can be per- 
formed. Cache test writes cause the data in TR3 to be written to the selected 
way and entry in the cache. Cache test reads allow inspection of the data, the 
valid bits, and the LRU bit for the cache entry. For data to be written to the allo- 
cated entry, the valid bits for the entry must be set prior to the write of the data. 
Bit definitions for the cache Test registers are shown in Table 2-17. 
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Table 2-17. TR3—TR5 Bit Definitions 


Register Name 
TR3 


Bit Position 
31-0 


Description 


Cache data: 
Cache read. 
Cache write. 


data accessed from the cache 
to be written into the cache 


TR4 


TR5 
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31-12 


6-3 


12 


Tag address: 
Cache read. 
Cache write. 


tag address from which data is read 
data written into the tag address of the selected set 


LRU: 
Cache read. 
Cache write. 


the LRU bit associated with the cache set 
ignored 


Valid bits: 
Cache read. 
Cache write. 


four valid bits for the accessed line, (one bit per byte) 
valid bits written into the line 


Block valid bit: 
Cache read. the block valid bit associated with the cache way 
Cache write. the block valid bit written into the selected way 

If 0, block is invalid (all 16 bytes are invalid). 

If 1, block is valid (one or more bytes may be valid in 16-byte line). 


Way selection: 
If 0, way 0 is selected. 
If 1, way 1 is selected. 


Set selection. Selects one of 256 sets. 
Line selection. Selects one of four lines. 


Control bits. These bits control reading or writing the cache: 
If 00, ignored 
If 01, cache write 
If 10, cache read 
If 11, cache invalidate 
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2.6 Memory Address Space 


The TI486SXLC directly addresses up to 16M bytes of physical memory, and 
the Tl486SXL directly addresses up to 4G bytes of physical memory. Memory 
address space is accessed as bytes, words (16 bits), or doublewords (82 bits). 
Words and doublewords are stored in consecutive memory bytes with the low- 
order byte located in the lowest address. The physical address of a word or 
doubleword is the byte address of the low-order byte. 


With the Tl486SXL(C) microprocessor family, memory can be addressed us- 
ing nine different addressing modes. These addressing modes are used to cal- 
culate an offset address often referred to as an effective address. Depending 
on the operating mode of the CPU, the offset is then combined using memory- 
management mechanisms to create and address a physical memory location. 


Memory-management mechanisms on the microprocessor consist of seg- 
mentation and paging. Segmentation allows each program to use several in- 
dependent, protected address spaces. Paging supports amemory subsystem 
that simulates a large address space using a small amount of RAM and disk 
storage for physical memory. Either or both of these mechanisms can be used 
for management of the microprocessor memory address space. 


2.6.1. Offset Mechanism 


The offset mechanism computes an offset (effective) address by summing up 
to three values: the base, the index, and the displacement. The base, if pres- 
ent, is the value in one of eight 32-bit General registers at the time the instruc- 
tion is executed. The index, like the base, is a value that is determined from 
one of the 32-bit General registers (except the ESP register) when the instruc- 
tion is executed. The index differs from the base in that the index is first multi- 
plied by a scale factor of 1, 2, 4 or 8 before the summation is made. The third 
component of the memory address calculation is the displacement, which is 
a value of up to 32 bits in length supplied as part of the instruction. Figure 2-20 
illustrates the calculation of the offset address. 


Figure 2-20. Offset Address Calculation 


Offset Address 
(Effective Address) 
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Nine valid combinations of the base, index, scale factor, and displacement can 
be used with the Tl486SXL(C) family instruction set. These combinations are 
listed in Table 2-18. The base and index both refer to contents of a register as 
indicated by [Base] and [Index]. 


Table 2-18. Memory Addressing Modes 


Scale Displacement 
Addressing Mode’ Base Index Factor (SF) (DP) Offset Address (OA) Calculation 
Direct X OA = DP 
Register indirect X OA = [BASE] 
Based xX x OA = [BASE] + DP 
Index X OA = [INDEX] + DP 
Scaled index x x OA = ([INDEX] * SF) + DP 
Based index X OA = [BASE] + [INDEX] 
Based scaled x % xX OA = [BASE] + ([INDEX] * SF) 
index 
Based index with x x x OA = [BASE] + [INDEX] + DP 
displacement 
Based scaled index X X X X OA = [BASE] + ({INDEX] * SF) + DP 


with displacement 


2.6.2 Real-Mode Memory Addressing 


In real-mode operation, the Tl486SXL(C) family of microprocessors address 
only the lowest 1M bytes (229) of memory. To calculate a physical memory ad- 
dress, the 16-bit segment base address located in the selected Segment reg- 
ister is shifted left by four bits and then the 16-bit offset address is added. For 
the TI486SXLC, the resulting 20-bit address is then extended with four zeros 
in the upper address bits to create the 24-bit physical address. For the 
TI486SXL, the resulting 20-bit address is then extended with 12 zeros in the 
upper address bits to create the 32-bit physical address. Figure 2-21 illus- 
trates the real-mode address calculation. Address offsets larger than 65,535 
cause a general protection fault. Physical addresses beyond 1M byte cause 
a segment-limit-overrun exception. 


Figure 2-21. Real-Mode Address Calculation 
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The addition of the base address and the offset address can result in a carry. 
Therefore, the resulting address can actually contain up to 21 significant ad- 
dress bits that address memory in the first 64K bytes above 1M byte. 


2.6.3 Protected-Mode Memory Addressing 


In protected mode, three mechanisms calculate a physical memory address. 


[1 Offset mechanism that produces the offset or effective address as in real 
mode 


1 Selector mechanism that produces the base address 


1 Optional paging mechanism that translates a linear address to the physi- 
cal memory address 


The offset and base address are added together to produce the linear address 
as illustrated in Figure 2—22. If paging is not used, the linear address is used 
as the physical memory address. If paging is enabled, the paging mechanism 
translates the linear address into the physical address. The offset mechanism, 
described earlier in this section, applies to both the real and protected modes. 
The selector and paging mechanisms are described in the following subsec- 
tions. 


Figure 2-22. Protected-Mode Address Calculation 
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2.6.3.1 Selector Mechanism 


Memory is divided into an arbitrary number of segments, each containing usu- 
ally much less than the 232-byte (4G-byte) maximum. 


The six Segment registers (CS, DS, SS, ES, FS, and GS) each contain a 16-bit 
selector. The selector is used when the register is loaded to locate a segment 
descriptor in either the global-descriptor table (GDT) or the local-descriptor 
table (LDT). The segment descriptor defines the base address, the limit, and 
the attributes of the selected segment and is cached on the microprocessor 
as a result of loading the selector. The cached descriptor contents are not vis- 
ible to the programmer. When a memory reference occurs in protected mode, 
the linear address is generated by adding the segment base address in the hid- 
den portion of the Segment register to the offset address. If paging is not en- 
abled, this linear address is used as the physical memory address. 
Figure 2-23 illustrates the operation of the selector mechanism. 
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Figure 2-23. Selector Mechanism 
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2.6.3.2 Paging Mechanism 
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The paging mechanism supports a memory subsystem that simulates a large 
address space with a small amount of RAM and disk storage. The paging 
mechanism either translates a linear address to its corresponding physical ad- 
dress or generates an exception if the required page is not currently present 
in RAM. When the operating system services the exception, the required page 
is loaded into memory and the instruction is then restarted. Pages are always 
4K bytes in size and are aligned to 4K-byte boundaries. 


Apage is addressed by using two levels of tables as illustrated in Figure 2-24. 
The upper 10 bits of the 32-bit linear address are used to locate an entry in the 
page-directory table. The page-directory table acts as a master index of up to 
1K individual 32-bit pointers to second-level page tables. The selected entry 
in the page-directory table, referred to as the directory-table entry, identifies 
the starting address of the second-level page table. The page-directory table 
itself is a page and is therefore aligned to a 4K-byte boundary. The physical 
address of the current page directory is stored in the CR3 Control register, also 
referred to as the Page-Directory Base register (PDBR). 


Memory Address Space 
Figure 2-24. Paging Mechanism 
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Bits 12-21 of the 32-bit linear address, referred to as the page-table index, lo- 
cate a 32-bit entry in the second-level page table. This page-table entry (PTE) 
contains the base address of the desired page frame. The second-level page- 
table addresses up to 1K individual page frames. A second-level page table 
is 4K bytes in size and is itself a page. The lower 12 bits of the 32-bit linear 
address, referred to as the page-frame offset, locate the desired data within 
the page frame. 


Since the page-directory table can point to 1K page tables, and each page 
table can point to 1K page frames, a total of 1M page frames can be imple- 
mented. Since each page contains 4K bytes, the microprocessor addresses 
up to 4G bytes of virtual memory with a single page-directory table. 


In addition to the base address of the page table or the page frame, each direc- 


tory-table entry or page-table entry contains attribute bits and a present bit, as 
illustrated in Figure 2—25 and listed in Table 2-19. 


Figure 2-25. Directory- and Page-Table Entry (DTE and PTE) Format 
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Table 2-19. Directory- and Page-Table Entry (DTE and PTE) Bit Definitions 


Bit Position Field Name _ Description 


31-12 


Base 
Address 


Specifies the base address of the page or page-table 


Undefined and available to the programmer 
Reserved and not available to the programmer 


Dirty bit. If set, indicates that a write access has occurred to the page (PTE only, 
undefined in DTE). 


Accessed flag. If set, indicates that a read access or write access has occurred 
to the page. 


Page-caching disable flag. If set, indicates that the page is not cacheable in the 
on-chip cache. 


Reserved and not available to the programmer 


User/supervisor attribute. If set (user), page is accessible at all privilege levels. 
If clear (Supervisor), page is accessible only when CPL < 2. 


Write/read attribute. If set (write), page is writable. If clear (read), page is read 
only. 


Present flag. If set, indicates that the page is present in RAM memory and 
validates the remaining DTE/PTE bits. If clear, indicates that the page is not 
present in memory and that the programmer can use the remaining DTE/PTE bits. 


If the present bit (P) is set in the DTE, the page table is present and the ap- 
propriate page-table entry is read. If P = 1 inthe corresponding PTE (indicating 
that the page is in memory), the accessed and dirty bits are updated and the 
operand is fetched. Both accessed bits (DTE and PTE) are set, if necessary, 
to indicate that the table and the page have been used to translate a linear ad- 
dress. The dirty bit (D) is set before the first write is made to a page. 


The present bit must be set to validate the remaining bits inthe DTE and PTE. 
If either of the present bits is not set, a page fault is generated when the DTE 
or PTE is accessed. If P = 0, the remaining DTE/PTE bits are available for use 
by the operating system. For example, the operating system can use these bits 
to record where on the hard disk the pages are located. A page fault is also 
generated if the memory reference violates the page-protection attributes. 


2.6.3.3 Translation Look-Aside Buffer 
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The translation look-aside buffer (TLB) is a cache for the paging mechanism 
and replaces the two-level page-table lookup procedure for cache hits. The 
TLB is a four-way, set-associative, 32-entry, page-table cache that automati- 
cally keeps the most commonly used page-table entries in the processor. The 
32-entry TLB coupled with a 4K page size results in coverage of 128K bytes 
of memory addresses. 


The TLB must be flushed when entries in the page tables are changed. The 
TLB is flushed whenever the CR3 register is loaded. An individual entry in the 
TLB can be flushed using the INVLPG instruction. 


2.7 


2.7.1 


Interrupts and Exceptions 


Interrupts and Exceptions 


Interrupts 


The processing of either an interrupt or an exception changes the normal se- 
quential flow of a program by transferring program control to a selected service 
routine. Except for SMM interrupts, the location of the selected service routine 
is determined by one of the interrupt vectors stored in the interrupt-descriptor 
table. 


All true interrupts are hardware interrupts and are generated by signal sources 
external to the CPU. All exceptions, including so-called software interrupts, 
are produced internally by the CPU. 


External events can interrupt normal program execution by using one of the 
three interrupt pins on the Tl486SXL(C) family of microprocessors. 


_j Nonmaskable Interrupt (NMI pin) 
_j Maskable Interrupt (INTR pin) 
J SMM Interrupt (SMI# pin) 


For most interrupts, program transfer to the interrupt routine occurs after the 
current instruction has been completed. When the execution returns to the 
original program, it begins immediately following the interrupted instruction. 


The NMI interrupt cannot be masked by software and always uses interrupt 
vector 2 to locate its service routine. Since the interrupt vector is fixed and is 
supplied internally, no interrupt-acknowledge bus cycles are performed. This 
interrupt is usually reserved for unusual situations such as parity errors and 
has priority over INTR interrupts. 


Once NMI processing has started, no additional NMls are processed until an 
IRET instruction is executed, typically at the end of the NMI service routine. 
If NMI is re-asserted prior to the execution of the IRET instruction, only one 
NMI rising edge is stored and then processed after execution of the next IRET. 


During the NMI service routine, maskable interrupts are still enabled. If an un- 
masked INTR occurs during the NMI service routine, the INTR is serviced and 
execution returns to the NMI service routine following the next IRET. If a HALT 
instruction is executed within the NMI service routine, the microprocessor re- 
starts execution only in response to RESET, an unmasked INTR, or an SMM 
interrupt. NMI does not restart CPU execution under this condition. 


The INTR interrupt is unmasked when the interrupt enable flag (IF) in the 
EFLAGS register is set to 1. With the exception of string operations, INTR in- 
terrupts are acknowledged between instructions. Long string operations have 
interrupt windows between memory moves that allow INTR interrupts to be ac- 
knowledged. 


When an INTR interrupt occurs, the CPU performs two locked interrupt-ac- 
knowledge bus cycles. During the second cycle, the CPU reads an 8-bit vector 
that is supplied by an external interrupt controller. This vector selects which of 
the 256 possible interrupt handlers is executed in response to the interrupt. 
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2.7.2 Exceptions 


The SMM interrupt has higher priority than either the INTR or NMI. After SMl# 
is asserted, program execution is passed to an SMI service routine that runs 
in SMM address space reserved for this purpose. The remainder of this sub- 
section (2.7.2, Exceptions, through 2.7.6, Error Codes, page 2-48) does not 
apply for SMM interrupts. SMM interrupts are described in Section 2.8, Sys- 
tem-Management Mode, page 2-49. 


Exceptions are generated by an interrupt instruction or a program error. Ex- 
ceptions are classified as traps, faults, or aborts depending on the mechanism 
used to report them and the restartability of the instruction that first caused the 
exception. 


2.7.2.1 Trap Exceptions 


A trap exception is reported immediately following the instruction that gener- 
ated it. Trap exceptions are generated as follows: 


Lj Ata breakpoint 

.] By software interrupt instruction (INTO, INT3, INTn, BOUND) 
Lj By asingle-step operation 

Lj By adata breakpoint 


Software interrupts can be used to simulate hardware interrupts. For example, 
an INTn instruction causes the processor to execute the interrupt service rou- 
tine pointed to by the nth vector in the interrupt table. Execution of the interrupt 
service routine occurs regardless of the state of the IF flag in the EFLAGS reg- 
ister. 


The one-byte INT3, or breakpoint-interrupt (vector 3), is a particular case of 
the INTn instruction. By inserting this one-byte instruction in a program, the 
user can set breakpoints in code that can be used during debug. 


Single-step operation is enabled by setting the TF bit in the EFLAGS register. 
When TF is set, the CPU generates a debug exception (vector 1) after the 
execution of every instruction. Data breakpoints also generate a debug excep- 
tion and are specified by loading the Debug registers (DRO—DR7) with the ap- 
propriate values. 


2.7.2.2 Fault Exceptions 


2-44 


A fault exception is caused by a program error and is reported prior to comple- 
tion of the instruction that generated the exception. By reporting the fault prior 
to instruction completion, the CPU is left in a state that allows the instruction 
to be restarted and the effects of the faulting instruction to be nullified. Fault 
exceptions include divide-by-zero errors, invalid opcodes, page faults, and co- 
processor errors. Debug exceptions (vector 1) are also handled as faults (ex- 
cept for data breakpoints and single-step operations). After execution of the 
fault service routine, the instruction pointer points to the instruction that caused 
the fault. 


Interrupts and Exceptions 


2.7.2.3 Abort Exceptions 


2.7.3 


2.7.3.1 


An abort exception is a type of fault exception severe enough that the CPU 
cannot restart the program at the faulting instruction. Abort exceptions include 
the double fault (vector 8) and coprocessor segment overrun (vector 9). 


Interrupt Vectors 


When the CPU services an interrupt or exception, the current program’s 
instruction pointer and flags are pushed onto the stack to let the interrupted 
program resume execution. In protected mode, the processor also saves an 
error code for some exceptions. Program control is then transferred to the in- 
terrupt handler (also called the interrupt service routine). Upon execution of an 
IRET at the end of the service routine, program execution resumes at the 
instruction-pointer address saved on the stack when the interrupt was serv- 
iced. 


Interrupt-Vector Assignments 


Each interrupt (except SMI#) and each exception is assigned one of 256 inter- 
rupt-vector numbers (Table 2-20). The first 32 interrupt-vector assignments 
are defined or reserved. INT instructions acting as software interrupts can use 
any of the interrupt vectors 0 through 255. The nonmaskable hardware inter- 
rupt (NMI) is assigned vector 2. 


In response to a maskable hardware interrupt (INTR), the microprocessor is- 
sues interrupt-acknowledge bus cycles to read the vector number from exter- 
nal hardware. These vectors should be in the vector range of 32—255 because 
vectors 0-31 are predefined. 


2.7.3.2  Interrupt-Descriptor Table 


The interrupt-vector number is used by the microprocessor to locate an entry 
in the interrupt-descriptor table (IDT). In real mode, each IDT entry consists 
of a four-byte far pointer to the beginning of the corresponding interrupt service 
routine. In protected mode, each IDT entry is an eight-byte descriptor. The In- 
terrupt-Descriptor-Table register (IDTR) specifies the beginning address and 
limit of the IDT. Following reset, the IDTR contains a base address of Oh with 
a limit of 3FFh. 


The IDT can be located anywhere in physical memory as determined by the 
IDTR register. The IDT can contain different types of descriptors: interrupt 
gates, trap gates, and task gates. Interrupt gates are used mainly to enter a 
hardware interrupt handler. Trap gates are generally used to enter an excep- 
tion handler or software interrupt handler. If an interrupt gate is used, the inter- 
rupt enable flag (IF) inthe EFLAGS register is cleared before the interrupt han- 
dler is entered. Task gates are used to make the transition to a new task. 
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Table 2-20. Interrupt-Vector Assignments 


2.7.4 
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Interrupt Vector Function Exception Type 

0 Divide error Fault 
1 Debug exception Trap/Fault (see Note) 
2 NMI interrupt = 
3 Breakpoint Trap 
4 Interrupt on overflow Trap 
5 BOUND range exceeded Fault 
6 Invalid opcode Fault 
7 Device not available Fault 
8 Double fault Abort 
9 Coprocessor segment overrun Abort 
10 Invalid TSS Fault 
11 Segment not present Fault 
12 Stack fault Fault 
13 General-protection fault Fault 
14 Page fault Fault 
15 Reserved — 
16 Coprocessor error Fault 
17 Alignment-check exception Fault 

18-31 Reserved — 

32-255 Maskable hardware interrupts Trap 

0-255 Programmed interrupt Trap 


Note: Data breakpoints and single steps are traps. All other debug exceptions are faults. 


Interrupt and Exception Priorities 


As the Tl486SXL(C) family of microprocessors executes instructions, each fol- 
lows a consistent policy for prioritizing exceptions and hardware interrupts as 
listed in Table 2-21. SMM interrupts always take precedence. Debug traps for 
the previous instruction and next instruction are handled in the next priority. 
When NMI and maskable INTR interrupts are both detected at the same 
instruction boundary, the microprocessor services the NMI interrupt first. 


The microprocessor checks for exceptions in parallel with instruction decoding 
and execution. Several exceptions can result in a single instruction. However, 
only one exception is generated upon each attempt to execute the instruction. 
Each exception service routine should make the appropriate corrections to the 
instruction and then restart the instruction. In that way, exceptions can be serv- 
iced until the instruction executes properly. 


The microprocessor supports restarting the instruction after all faults except 
when an instruction causes a task switch to a task whose task-state segment 
(TSS) is partially missing. A TSS can be partially missing if the TSS is not page- 


Interrupts and Exceptions 


aligned and one of the pages (where the TSS resides) is not currently in 


memory. 


Table 2-21. Interrupt and Exception Priorities 


Priority Description Notes 
1 Debug traps and faults from previous Includes single-step trap and data breakpoints 
instruction specified in the Debug registers 
2 Debug traps for next instruction Includes instruction execution breakpoints 
specified in the Debug registers 
3 Nonmaskable hardware interrupt Caused by NMI asserted 
4 Maskable hardware interrupt Caused by INTR asserted and IF = 1 
5 Faults resulting from fetching the next Includes segment not present, 
instruction general-protection fault, and page fault 
6 Faults resulting from instruction decoding Includes illegal opcode, instruction too long, 
and privilege violation 
7 WAIT instruction and TS = 1 and MP = 1 Device not available exception generated 
8 ESC instruction and EM = 1 or TS = 1 Device not available exception generated 
9 Coprocessor-error exception Caused by ERROR# asserted 
10 Segmentation faults (for each memory Includes segment not present, stack fault, and 
reference required by the instruction) that general-protection fault 
prevent transferring the entire memory operand 
11 Page faults that prevent transferring the entire — 
memory operand 
12 Alignment-check fault — 


2.7.5 Exceptions in Real Mode 


Many of the exceptions described in Table 2—20 are not applicable in real 
mode. Exceptions 10, 11, and 14 do not occur in real mode. Other exceptions 
have slightly different meanings in real mode, as listed in Table 2—22. 


Table 2-22. Exception Changes in Real Mode 


Vector Number Protected-Mode Function Real Mode Function 


8 Double fault Interrupt table limit overrun 
10 Invalid TSS — 
11 Segment not present — 
12 Stack fault SS segment limit overrun 
13 General-protection fault CS, DS, ES, FS, and/or GS seg- 
ment limit overrun 
14 Page fault — 
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2.7.6 Error Codes 


When operating in protected mode, the following exceptions generate a 16-bit 
error code: 


Double fault 

Alignment check 
Invalid TSS 

Segment not present 
Stack fault 
General-protection fault 
Page fault 


OUUOUUUL 


The error-code format is shown in Figure 2—26 and the error-code bit defini- 
tions are listed in Table 2-23. Bits 15—3 (selector index) are not meaningful 
if the error code is generated as the result of a page fault. The error code is 
always zero for double faults and alignment-check exceptions. 


Figure 2-26. Error-Code Format 
15 3) 12; tO 


Selector Index S2 | S1] SO 


Table 2-23. Error-Code Bit Definitions 


Selector 
Fault Index 
Type (Bits 15-3) S2 (Bit 2) S1 (Bit 1) SO (Bit 0) 
Page fault Reserved Fault caused by: Fault occurred during: Fault occurred during: 
0 = page not present 0 = read access 0 = supervisor access 
1 = page-level protec- 1 = write access 1 = user access 
tion violation 
IDT fault Index of faulty Reserved 1 If set, the exception 
IDT selector occurred while trying to 
invoke exception or 
hardware interrupt 
handler. 
Segment Index of faulty _—‘T!I bit of faulty selector 0 If set, the exception 
fault selector occurred while trying to 


invoke exception or 
hardware interrupt 
handler. 
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2.8 System-Management Mode 


System-management mode (SMM) provides an additional interrupt for system 
power management or software-transparent emulation of I/O peripherals. 
SMM is entered using the software-management interrupt (SMI#), which has 
a higher priority than any other interrupt including NMI. After receiving an 
SMI#, portions of the CPU state are automatically saved, SMM is entered, and 
program execution begins at the base of SMM space (Figure 2-27 and 
Figure 2-28). Running in protected SMM address space, the interrupt routine 
does not interfere with the operating system or any application program. 


Seven SMM instructions have been added to the TI486SXL(C) microproces- 
sor family instruction set that permit saving and restoring the total CPU state 
when in SMM mode. Two new pins, SMI# and SMADS#, support SMM func- 
tions. 


Figure 2-27. Tl486SXLC Memory and I/O Address Spaces 


FF FFFFh 


00 0000h 
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Figure 2-28. TI486SXL Memory and I/O Address Spaces 
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2.8.1 SMM Operations 


SMM Mode 
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SMM operation is summarized in Figure 2-29. Entering SMM requires the 
assertion of SMI# for at least four CLK2 periods. For the SMI# input to be rec- 
ognized, the following Configuration register bits must be set as follows: 


SMI CCR1(1) =1 
SMAC  CCRI1(2) =0 
SM4 CCR1(7) =1 
ARR4 _- SIZE(3-0) —s_ > 0 


The Configuration registers are discussed in Section 2.5, System Register 
Set, page 2-16. After recognizing SMI# and prior to executing the SMI service 
routine, some of the CPU-state information is changed. Prior to modification, 
this information is automatically saved in the SMM memory-space header lo- 
cated at the top of the SMM memory space. After the header is saved, the CPU 
enters real mode and begins executing the SMI service routine starting at the 
SMM memory base address. 


The SMI service routine is user-definable and may contain system- or power- 
management software. If the power-management software forces the CPU 
to power down, or if the SMI service routine modifies registers other than those 
saved automatically, the complete CPU-state information must be saved. 


System-Management Mode 
Figure 2-29. SMM Execution Flow Diagram 
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A complete CPU-state save is performed by using MOV instructions to save 
normally accessible information and by using the SMM instructions to save 
CPU information that is normally inaccessible to the programmer. As will be 
explained, SMM instructions (SVDC, SVLDT, and SVTS) store the LDTR, 
TSR, and Segment registers and their associated descriptor cache entries in 
80-bit memory locations. After power up or at the end of the SMI service rou- 
tine, the MOV and additional SMM instructions (RSDC, RSLDT, and RSTS) 
restore the CPU state. The SMM RSM instruction returns the CPU to normal 
execution. 


2.8.2 SMM Memory Space Header 


With every SMI interrupt, certain CPU-state information is automatically saved 
in the SMM memory space header located at the top of SMM address space 
(Table 2-24 and Figure 2-30). The header contains CPU-state information 
that is modified when servicing an SMI interrupt. Included in this information 
are two pointers. The current IP points to the instruction that is executing when 
the SMI is detected. The next IP points to the instruction that is executed after 
exiting SMM. The contents of the Debug register 7 (DR7), the extended Flag 
Word register (EFLAGS), and the Control register 0 (CRO) are also saved. If 
SMM has been entered due to an I/O trap for a REP INSx or REP OUTSx 
instruction, the current IP and next IP fields (Table 2-24) contain the same ad- 
dresses, and the | and P fields contain valid information. 
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Table 2-24.SMM Memory Space Header 


Name 
DR7 


EFLAGS 
CRO 


Current IP 


‘Name —SCO@Description = (aiti‘(i‘(‘(‘(‘(<‘i‘i(l”t”*”*~<CS;é‘; O!!””””””””!”:C«SCO! 
The contents of Debug register 7 4 bytes 
The contents of the extended flag register 4 bytes 
The contents of Control register 0 4 bytes 
The address of the instruction executed prior to servicing the SMI interrupt 4 bytes 


Next IP 

CS Selector 
CS Descriptor 
P 


ESI or EDI 


The address of the next instruction that is executed after exiting the SMM mode 4 bytes 


Code Segment register selector for the current code segment 2 bytes 
Code register descriptor for the current code segment 8 bytes 
REP INSx/OUTSxt Indicator 1 bit 


P is 1 if current instruction has a REP prefix 
P is 0 if current instruction does not have REP prefix 


IN, INSx, OUT, or OUTSx Indicator 1 bit 
lis 1 if current instruction performed is an I/O WRITE 
lis O if current instruction performed is an I/O READ 


Restored ESI or EDI value. Used when it is necessary to repeata REP OUTSx or 4 bytes 
REP INSx instruction when one of the I/O cycles caused an SMI# trap 


T INSx = INS, INSB, INSW, or INSD instruction, and OUTSx = OUTS, OUTSB, OUTSW, or OUTSD instruction. 


Figure 2-30. SMM Memory Space Header 
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2.8.3 SMM Instructions 
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The Tl486SXL(C) microprocessor family automatically saves the CPU-state 
information shown in Table 2—24 and Figure 2-30 when entering SMM. This 
allows fast SMI service routine entry and exit. After entering the SMI service 
routine, the MOV, SVDC, SVLDT, and SVTS instructions can be used to save 
the complete CPU state information. If the SMI service routine either modifies 
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more than what is saved in the SMM memory space header or forces the CPU 
to power down, the complete CPU-state information must be saved. Since the 
TI486SXL(C) microprocessors are static devices, their internal state is re- 
tained when the input clock is stopped. Therefore, an entire CPU-state save 
is not necessary prior to stopping the input clock. 


The new SMM instructions, listed in Table 2-25, can be executed only if: 
(a) the current privilege level (CPL) = 0 and the SMAC bit (CCR1, bit 2) are set; 
or (6) CPL=0 and the CPU is in an SMI service routine (SMI# = 0). If both these 
conditions are not met and the microprocessor attempts to execute an SMM 
instruction, it generates an invalid-opcode exception. These instructions can 
be executed outside of defined SMM space provided the above conditions are 
met. All of the SMM instructions (except RSM) save or restore 80 bits of data, 
allowing the saved values to include the hidden portion of the register con- 
tents. 


Table 2-25. SMM Instruction Set 


Instruction Opcode 


Format Description 


SVDC OF 78 [mod sreg3 r/m] SVDC mems0t, sreg3 Save Segment register and Descriptor 


Saves reg DS, ES, FS, GS, or SS to mem80 


RSDC OF 79 [mod sreg3 r/m] RSDC sreg3,mem80 Restore Segment register and Descriptor 


Restores reg DS, ES, FS, GS, or SS from 
mems0 
(CS is automatically restored with RSM) 


SVLDT OF 7A [mod 000 r/m] SVLDT mem8s0 Save LDTR and Descriptor 


Saves local-descriptor table (LDTR) to 
mems0 


RSLDT OF 7B [mod 000 r/m] RSLDT mem8s0 Restore LDTR and Descriptor 


Restores local-descriptor table (LDTR) from 
mems0 


SVTS OF 7C [mod 000 r/m] SVTS mem8s0 Save TSR and Descriptor 


Save Task-State register (TSR) to mem80 


RSTS OF 7D [mod 000 r/m] RSTS mem8s0 Restore TSR and Descriptor 


RSM OF AA 


Restores Task-State register (TSR) from 
mems0 


RSM Resume Normal Mode 
Exits SMM mode. The CPU state is restored 
using the SMM memory space header and 
execution resumes at interrupted point. 


tmem80 = 80-bit memory location. 
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2.8.4 SMM Memory Space 


SMM memory space is defined by assigning address region 4 to SMM memory 
space. This assignment is made by setting bit 7 (SM4) in the on-chip CCR1 
register. ARR4, also an on-chip Configuration register, specifies the base ad- 
dress and size of the SMM memory space. The base address must be a multi- 
ple of the SMM memory space size. For example, a 32K-byte SMM memory 
space must be located at a 32K-byte address boundary. The memory space 
size can range from 4K bytes to 16M bytes. 


SMM memory space accesses can use address pipelining, and they are al- 
ways noncacheable. SMM accesses ignore the state of the A20M# input and 
drive the A20 address bit to the unmasked value. 


Access to the SMM memory space can be made while not in SMM mode by 
setting the system-management access (SMAC) bit in the CCR1 register. This 
feature can be used to initialize the SMM memory space. 


While in SMM mode, SMADS# address strobes are generated instead of 
ADS# for SMM memory accesses. Any memory accesses outside the defined 
SMM space result in normal memory accesses and ADS# strobes. Data 
(noncode) accesses to main memory that overlap defined SMM memory 
space are allowed if bit 3 in CCR1 (MMAC) is set. In this case, ADS# strobes 
are generated for data accesses only, and SMADS# strobes continue to be 
generated for code accesses. 


2.8.5 SMI Service Routine Execution 
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Upon entry into SMM after the SMM header has been saved, the CRO, 
EFLAGS, and DR7 registers are set to their reset values. The Code Segment 
(CS) register is loaded with the base and the limits defined by the ARR4 regis- 
ter, and the SMI service routine begins execution at the SMM base address 
in real mode. 


The routine must then save the value of any registers that can be changed by 
the SMI service routine. For data accesses immediately after entering the SMI 
service routine, the routine must use CS as a segment override. I/O port ac- 
cess is possible during the routine but registers modified by the I/O instructions 
must be saved to assure a proper return. Before using a Segment register, the 
register’s descriptor-cache contents should be saved using the SVDC instruc- 
tion. While executing in SMM space, execution flow can transfer to normal 
memory locations. 


Hardware interrupts (INTRs and NMls) can be serviced during an SMI service 
routine. If interrupts are to be serviced while operating in SMM memory space, 
the SMM memory space must be within the 0 to 1M-byte address range. This 
assures a proper return to the SMI service routine after handling the interrupt. 
INTRs are disabled automatically when entering SMM since the IF flag is set 
to its reset value. However, NMls remain enabled. If you want to disable NMI, 
do it with the system hardware logic immediately after entering the SMI service 
routine. 


Within the SMI service routine, protected mode can be entered and exited as 
required, and real- or protected-mode device drivers can be called. 
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To exit the SMI service routine, a resume (RSM) instruction, rather than an 
IRET, is executed. The RSM instruction causes the microprocessor to restore 
the CPU state using the SMM header information and resume execution at the 
interrupted point. Ifthe programmer saved the full CPU state, reload the stored 
values using the MOV and the RSDC, RSLDT, and RSTS instructions before 
executing the RSM instruction. 


2.8.6 CPU States Related to SMM and Suspend Mode 


The state diagram shown in Figure 2-31 illustrates the various CPU states 
associated with SMM and suspend mode. While in the SMI service routine, the 
TI486SXL(C) microprocessor family can enter suspend mode either by 
executing a HALT instruction or by asserting the SUSP# input. 


During SMM operation and while in SUSP#-initiated suspend mode, an occur- 
rence of either NMI or INTR is latched. For INTR to be latched, the IF flag must 
be set. The INTR or NMI is serviced after exiting suspend mode. 


If suspend mode is entered via a HALT instruction from the operating system 
or application software, the reception of an SMI# interrupt causes the CPU to 
exit suspend mode and enter SMM. If suspend mode is entered via the hard- 
ware (SUSP# = 0) while the operating system or application software is active, 
the CPU latches one occurrence of INTR#, NMI, and SMI#. 
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Figure 2-31. SMM and Suspended-Mode Flow Diagram 
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2.9 Shutdown and Halt 


2.10 Protection 


Shutdown occurs when a severe error is detected that prevents further proces- 
sing. An NMI input causes the microprocessor to exit the shutdown mode if the 
IDT limit is large enough to contain the NMI interrupt vector (at least OOOFh) 
and the stack has enough room to contain the vector and flag information (i.e., 
stack pointer is greater than 0005h). Otherwise, shutdown can be exited only 
by a processor reset. 


The halt (HLT) instruction stops program execution and prevents the proces- 
sor from using the local bus until it is restarted. The microprocessor then enters 
a low-power suspend mode. INTR with interrupts enabled (IF bit in 
EFLAGS = 1), SMI, NMI, or RESET forces the CPU out of the halt state. If in- 
terrupted, the saved code segment and instruction pointer specify the instruc- 
tion following the halt. 


Segment protection and page protection are safeguards built into the 
TI486SXL(C) microprocessor family protected-mode architecture that deny 
unauthorized or incorrect access to selected memory addresses. These safe- 
guards allow multitasking programs to be isolated from each other and from 
the operating system. Page protection is discussed in subsection 2.6.3, Pro- 
tected-Mode Memory Addressing, page 2-39. This section concentrates on 
segment protection. 


Selectors and descriptors are the key elements in the segment-protection 
mechanism. The segment base address, size, and privilege level are estab- 
lished by a segment descriptor. Privilege levels control the use of privilege 
instructions, I/O instructions, and access to segments and segment descrip- 
tors. Selectors are used to locate segment descriptors. 


Segment accesses are divided into two basic types, those involving code seg- 
ments (e.g., control transfers) and those involving data accesses. The ability 
of a task to access a segment depends on: 


Lj] The segment type 

Lj The instruction requesting access 

Lj The type of descriptor used to define the segment 
Lj The associated privilege levels 


Data stored ina segment can be accessed only by code executing at the same 
or a higher privilege level. A code segment or procedure can be called only by 
a task executing at the same or a less privileged level. 


2.10.1 Privilege Levels 


The values for privilege levels range between 0 and 3. Level 0 is the highest 
privilege level (most privileged), and level 3 is the lowest privilege level (least 
privileged). The privilege level in real mode is effectively 0. 


The descriptor privilege level (DPL) is the privilege level defined for a segment 
in the segment descriptor. The DPL field specifies the minimum privilege level 
needed to access the memory segment pointed to by the descriptor. 
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The current privilege level (CPL) is defined as the current task’s privilege level. 
The CPL of an executing task is stored in the hidden portion of the Code Seg- 
ment register and essentially is the DPL for the current code segment. 


The requested privilege level (RPL) specifies a selector’s privilege level. It dis- 
tinguishes between the privilege level of a routine actually accessing memory 
(CPL), and the privilege level of the original memory access requestor (RPL). 
The lower privilege level (0 is highest) of RPL and CPL is called the effective 
privilege level (EPL). Therefore, if RPL =0 ina segment selector, the effective 
privilege level is always determined by the CPL. If RPL = 3, the effective privi- 
lege level is always 3 regardless of the CPL. 


For a memory access to succeed, the effective privilege level (EPL) must be 
at least as privileged as the descriptor privilege level (EPL = DPL). If the EPL 
is less privileged than the DPL (EPL < DPL), a general-protection fault is gen- 
erated. For example, if a segment has a DPL = 2, an instruction accessing the 
segment succeeds only if executed with an EPL > 2. 


2.10.2 I/O Privilege Levels 


The I/O privilege level (IOPL) allows the operating system executing at 
CPL = 0 to define the least-privileged level at which IOPL-sensitive instruc- 
tions can be used unconditionally. The |OPL-sensitive instructions include 
CLI, IN, OUT, INS, OUTS, REP INS, REP OUTS, and STI. Modification of the 
IF bit in the EFLAGS register is also sensitive to the I/O privilege level. 


The IOPL is stored in the EFLAGS register. An I/O permission bit map is avail- 
able as defined by the 32-bit task-state segment (TSS). Since each task can 
have its own TSS, access to individual I/O ports can be granted through sepa- 
rate I/O permission bit maps. 


If CPL < IOPL, IOPL-sensitive operations can be performed. If CPL > IOPL, 
a general-protection fault is generated if the current task is associated with a 
16-bit TSS. Ifthe current task is associated with a 32-bit TSS and CPL > IOPL, 
the CPU consults the I/O permission bit map in the TSS to determine on a port- 
by-port basis whether I/O instructions (IN, OUT, INS, OUTS, REP INS, REP 
OUTS) are permitted. The remaining IOPL-sensitive operations generate a 
general-protection fault. 


2.10.3 Privilege Level Transfers 


A task’s CPL can be changed only through intersegment control transfers us- 
ing gates or task switches to a code segment with a different privilege level. 
Control transfers result from exception and interrupt servicing and from execu- 
tion of the CALL, JMP, INT, IRET, and RET instructions. 


2.10.3.1 Control Transfers 
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The five types of control transfers are summarized in Table 2—26. Control 
transfers can be made only when the operation causing the control transfer 
references the correct descriptor type. Any violation of these descriptor-usage 
rules causes a general-protection fault. 


Protection 


Table 2-26. Descriptor Types Used for Control Transfer 


Descriptor Descriptor 
Type Of Control Transfer Operation Types Referenced Table 
Intersegment within the same privilege JMP, CALL, RET, IRETT Code segment GDT or LDT 
level 
Intersegment to the same or a more CALL Call gate GDT or LDT 


privileged level 


Interrupt within task (could change CPL_ Interrupt instruction, Excep- Trap or interrupt LDT 


level) tion, External interrupt gate 
Intersegment to a less privileged level RET, IRETT Code segment GDT or LDT 
(changes task CPL) 
Task switch via TSS CALL, JMP Task-state GDT 
segment 
Task switch via task gate CALL, JMP Task gate GDT or LDT 
IRET#, Interrupt instruction, Task gate IDT 


Exception, External interrupt 


T NT (nested task bit in EFLAGS) = 0 
+ NT (nested task bit in EFLAGS) = 1 


2.10.3.2 Gates 


Any control transfer that changes the CPL within a task results in a change of 
stack. The initial values for the stack segment (SS) and stack pointer (ESP) 
for privilege levels 0, 1, and 2 are stored in the TSS. During a JMP or CALL 
control transfer, the SS and ESP are loaded with the new stack pointer and the 
previous stack pointer is saved on the new stack. When returning to the origi- 
nal privilege level, the RET or IRET instruction restores the less-privileged 
stack. 


Gate descriptors provide protection for privilege transfers among executable 
segments. Gates change to routines of the same or higher privilege level. Call 
gates, interrupt gates, and trap gates are used for privilege transfers within a 
task. Task gates are used to transfer between tasks. 


Gates conform to the standard rules of privilege. In other words, gates can be 
accessed by a task if the effective privilege level (EPL) is the same or higher 
than the gate descriptor’s privilege level (DPL). 


2.10.4 Initialization and Transition to Protected Mode 


The TI486SXL(C) microprocessor family switches to real mode immediately 
after RESET and the system tables and registers are initialized. The GDTR 
and IDTR must point to a valid GDT and IDT, respectively. The size of the IDT 
should be at least 256 bytes, and the GDT must contain descriptors that de- 
scribe the initial code and data segments. 


The processor can be placed in protected mode by setting the PE bit in the 
CRO register. After enabling protected mode, the CS register should be loaded 
and the instruction-decode queue should be flushed by executing an interseg- 
ment JMP. Finally, all data Segment registers should be initialized with ap- 
propriate selector values. 
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2.11 Virtual-8086 Mode 


The Tl486SXL(C) microprocessor family supports both real mode and virtu- 
al-8086 (V86) mode. V86 mode allows execution of 8086 applications and 
8086 operating systems, yet still permits use of the Tl1486SXL(C) microproces- 
sor-protection mechanism. V86 tasks run at privilege level 3. Upon entry, all 
segment limits are set to FFFFh (64k) as in real mode. 


2.11.1 Memory Addressing 


2.11.2 Protection 


In V86 mode, Segment registers are used in the same manner as in real mode. 
The contents of the Segment register are shifted left four bits and added to the 
offset to form the segment base linear address. The Tl486SXL(C) micropro- 
cessor family permits the operating system to select which programs use the 
V86 address mechanism and which programs use protected-mode addres- 
sing for each task. 


The T1486SXL(C) microprocessor family also permits the use of paging when 
operating in V86 mode. Using paging, the 1M-byte address space of the V86 
task can be mapped anywhere in the 4G-byte linear address space of the mi- 
croprocessor CPU. As in real mode, linear addresses that exceed 1M byte 
cause a segment-limit-overrun exception. 


The paging hardware allows multiple V86 tasks to run concurrently, provides 
protection, and isolates operating systems. The paging hardware must be en- 
abled to run multiple V86 tasks or to relocate the address space of a V86 task 
to physical address space above 1M byte. 


All V86 tasks operate at the lowest privilege level (level 3) and are subject to 
all of the microprocessor protected-mode protection checks. As a result, any 
attempt to execute a privileged instruction within a V86 task results in a gener- 
al-protection fault. 


In V86 mode, a slightly different set of instructions is sensitive to the I/O privi- 
lege level (IOPL) than in protected mode. These instructions are CLI, INTn, 
IRET, POPF, PUSHF, and STI. The INT3, INTO and BOUND variations of the 
INT instruction are not IOPL-sensitive. 


2.11.3 Interrupt Handling 
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To fully support the emulation of an 8086-type machine, interrupts in V86 mode 
are handled as follows. When an interrupt or exception is serviced in V86 
mode, program execution transfers to the interrupt service routine at privilege 
level 0 (i.e., a transition from V86 to protected mode occurs) and the VM bit 
in the EFLAGS register is cleared. The protected-mode interrupt service rou- 
tine then determines if the interrupt came from a protected-mode or V86 ap- 
plication by examining the VM bit in the EFLAGS image stored on the stack. 
The interrupt service routine can then choose to allow the 8086 operating sys- 
tem to handle the interrupt, or it can emulate the function of the interrupt han- 
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dler. Following completion of the interrupt service routine, an IRET instruction 
restores the EFLAGS register (restores VM = 1) and segment selectors, and 
control returns to the interrupted V86 task. 


2.11.4 Entering and Leaving V86 Mode 


V86 mode is entered from protected mode either by executing an IRET instruc- 
tion at CPL = 0 or by task switching. If an IRET is used, the stack must contain 
an EFLAGS image with VM = 1. If a task switch is used, the TSS must contain 
an EFLAGS image containing a 1 inthe VM bit position. The POPF instruction 
cannot be used to enter V86 mode since the state of the VM bit is not affected. 
V86 mode can be exited only as the result of an interrupt or exception. The 
transition out must use a 32-bit trap or interrupt gate that must point to a non- 
conforming privilege level 0 segment (DPL = 0) or a 32-bit TSS. These restric- 
tions are required to permit the trap handler to IRET to return to the V86 pro- 
gram. 
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Chapter 3 


TI486SXLC Microprocessor Bus Interface 


This chapter summarizes the TI486SXLC series processor signals and 
describes all inputs/outputs, functional timing and bus operations (including 
pipelined and nonpipelined addressing), various interfaces, and power man- 


agement. 
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3.1. Input/Output Signals 


This section describes the TlI486SXLC series microprocessors’ input and out- 
put signals. The discussion of these signals is arranged by the functional 
groups shown in Figure 3—1. Table 3-1 gives a brief description of each signal. 


Figure 3-1. Tl486SXLC Functional Signal Groupings 
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Table 3-1. TlI486SXLC Signal Summary 


Signal 
ADS# 
A20M# 
A23-A1 
BHE# 
BLE# 
BUSY# 
CLK2 
D15—D0 
D/C# 
ERROR# 
FLT# 
FLUSH# 
HLDA 
HOLD 
INTR 
KEN# 
LOCK# 
M/lO# 
NA# 
NMI 
PEREQ 
READY# 
RESET 
SMADS# 
SMI# 
SUSP# 
SUSPA# 
W/R# 


Signal Name 

Address strobe 

Address bit-20 mask 
Address bus lines 

Byte-high enable 

Byte-low enable 

Processor extension busy 
2X clock input 

Data bus lines 

Data/control 

Processor extension error 
Float 

Cache flush 

Hold acknowledge 

Hold request 

Maskable interrupt request 
Cache enable 

Bus lock 
Memory/input-output 

Next address request 
Nonmaskable interrupt request 
Processor extension request 
Bus ready 

Reset 

SMM address strobe 
System management interrupt 
Suspend request 

Suspend acknowledge 


Write/read 
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Signal Group 
Bus-cycle control 
None 

Address bus 

Address bus 

Address bus 
Coprocessor interface 
None 

None 

Bus-cycle definition 
Coprocessor interface 
None 

Internal cache interface 
Bus arbitration 

Bus arbitration 
Interrupt control 
Internal cache interface 
Bus-cycle definition 
Bus-cycle definition 
Bus-cycle control 
Interrupt control 
Coprocessor interface 
Bus-cycle control 
None 

Bus-cycle control 
Interrupt control 
Power management 
Power management 


Bus-cycle definition 


The following sections describe the signals and their functional characteris- 
tics. Additional signal information can be found in Chapter 5, Electrical Specifi- 
cations. Chapter 5 documents the dc and ac characteristics for the signals in- 
cluding voltage levels, propagation delays, setup times, and hold times. Speci- 
fied setup and hold times must be met for proper operation of the TI486SXLC 
series microprocessors. 
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3.1.1. TI486SXLC Terminal Function Descriptions 
Table 3—2 identifies and describes each of the TI486SXLC package terminals. 


Table 3-2. TI486SXLC Terminal Functions 


Terminal 
Name No. Description 
Al 18 Address Bus (active high). The address bus (A23-A1) signals are 3-state outputs that 
A2 51 provide addresses for physical memory and I/O ports. All address lines can be used to 
A3 52 address physical memory, which allows a 16M-byte address space (00 0000h to FF 
A4 53 FFFFh). During I/O port accesses, A23—-A16 are driven low (except for coprocessor 
AD5 54 accesses). This permits a 64K-byte I/O address space (00 0000h to 00 FFFFh). 
A6 55 
A7 56 During all coprocessor I/O accesses, address lines A22—A16 are driven low and A23 is 
A8 58 driven high. This allows A23 to be used by external logic to generate a coprocessor 
AQ 59 select signal. Coprocessor command transfers occur with address 80 OOF8h. 
A10 60 Coprocessor data transfers occur with addresses 80 OOFCh and 80 OOFEh. A23-A1 
Alt 61 float while the CPU is in a hold-acknowledge or float state. 
A12 62 
A13 64 
A14 65 
A15 66 
A16 70 
A17 72 
A18 73 
A19 74 
A20 75 
A2t 76 
A22 79 
A23 80 
ADS# 16 Address Strobe (active low). This 3-state output indicates that the Tl486SXLC 
microprocessor has driven a valid address (A23—A1, BHE#, and BLE#) and bus-cycle 
definition (M/lO#, D/C#, and W/R#) on the appropriate output pins. During nonpipelined 
bus cycles, ADS# is active for the first clock of the bus cycle. During address pipelining, 
ADS# is asserted during the previous bus cycle and remains asserted until READY# is 
returned for that cycle. ADS# floats while the microprocessor is in a hold-acknowledge 
or float state. 
A20M# 31 Address Bit-20 Mask (active low). This input causes the microprocessor to mask (force 


low) physical address bit 20 when driving the external address bus or performing an 
internal cache access. When the processor is in real mode, asserting A2OM# emulates 
the 1M-byte address wraparound that occurs on the 8086. The A20 signal is never 
masked when paging is enabled regardless of the state of the A20M# input. The AZOM# 
input is ignored following reset and can be enabled using the A20M bit in the CCRO 
Configuration register. 


A20M¢# is internally connected to a pullup resistor to prevent it from floating active when 
left unconnected. 
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Table 3-2. Tl486SXLC Terminal Functions (Continued) 


Terminal 


Name 


BHE# 
BLE# 


BUSY# 


CLK2 


D/C# 


No. 


19 
17 


34 


15 


24 


Description 


Byte Enables (active low). Byte-low enable (BLE#) and byte-high enable (BHE#) 
3-state outputs indicate which byte(s) of the 16-bit data bus are selected for data transfer 
during the current bus cycle. BLE# selects the low byte (D7—DO) and BHE# selects the 
high byte (D15—D8). 


When BHE# and BLE# are asserted, both bytes (all 16 bits) of the data bus are selected. 
BLE# and BHE# float while the CPU is in a hold-acknowledge or float state. 


BHE# = BLE# = 1 never occurs during a bus cycle. 


Coprocessor Busy (active low). This input indicates to the TI486SXLC that the 
coprocessor is currently executing an instruction and is unable to accept another 
opcode. When the microprocessor encounters a WAIT instruction or any coprocessor 
instruction that operates on the coprocessor stack (i.e., load, pop, or arithmetic 
operation), BUSY# is sampled. BUSY# is continually sampled and must be recognized 
as inactive before the CPU supplies the coprocessor with another instruction. However, 
coprocessor instructions FNINIT and FNCLEX are allowed to execute even if BUSY# 
is active because they are used for coprocessor initialization and exception clearing. 


BUSY# is internally connected to a pullup resistor to prevent it from floating active when 
left unconnected. 


2X Clock Input (active high). This input signal is the basic timing reference for 
TI486SXLC microprocessors. The CLK2 input is internally divided by two to generate 
the internal processor clock. The external CLK2 is synchronized to a known phase of 
the internal processor clock by the falling edge of the RESET signal. External timing 
parameters are defined with respect to the rising edge of CLK2. 


For the Tl486SXLC2 microprocessors, the CLK2 input is used internally to generate the 
internal core processor clock and the internal bus interface clock. The external CLK2 is 
synchronized to a known phase of the internal processor clock by the falling edge of the 
RESET signal. External timing parameters are defined with respect to the rising edge 
of CLK2. 


Data/Control. This 3-state, bus-cycle-definition signal is low during control cycles and 
is high during data cycles. Control cycles are issued during functions such as a halt 
instruction, interrupt servicing, and code fetching. Data bus cycles include data access 
from either memory or I/O. 
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Table 3-2. TlI486SXLC Terminal Functions (Continued) 


Name 


ERROR# 


FLUSH# 
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Terminal 


DO 
D1 
D2 
D3 
D4 
D5 
D6 
D7 
D8 
D9 
D10 
Di1 
D1i2 
D13 
D14 
D15 


FLT# 


28 


30 


Description 


Data Bus (active high). The data bus signals (D15—D0) are 3-state bidirectional signals 
that provide the data path between the microprocessor, the external memory, and the 
I/O devices. The data-bus inputs receive data during memory-read, l/O-read, and 
interrupt-acknowledge cycles and delivers output data during memory and I/O-write 
cycles. Data read operations require that specified data setup and hold times be met for 
correct operation. The data bus signals float while the CPU is in a hold-acknowledge or 
float state. 


Coprocessor Error (active low). This input indicates that the coprocessor generated an 
error during execution of an instruction. ERROR# is sampled by the microprocessor 
whenever a coprocessor instruction is executed. If ERROR# is sampled active, the 
processor generates exception 16, which is then serviced by the exception handling 
software. 


The following coprocessor instructions, which clear coprocessor error flags and save 
the coprocessor state, do not generate an exception 16 even if ERROR# is 
active: FNINIT, FNCLEX, FNSTSW, FNSTCW, FNSTENV, FNSAVE. 


ERROR# is internally connected to a pullup resistor to prevent it from floating active 
when left unconnected. 


Float (active low). This input forces all bidirectional and output signals to a 3-state 
condition. Floating the signals allows the microprocessor signals to be driven externally 
without physically removing the device from the circuit. The microprocessor must be 
reset following assertion or negation of FLT#. Use FLT# only for testing. 


FLT# is internally connected to a pullup resistor to prevent it from floating active when 
left unconnected. 


Cache Flush (active low). This input invalidates (flushes) the entire cache. Use of 
FLUSH# to maintain cache coherency is optional. The cache may also be invalidated 
during each hold-acknowledge cycle by setting the BARB bit in the CCRO Configuration 
register. The FLUSH# input is ignored following reset and can be enabled using the 
FLUSH bit in the CCRO Configuration register. 


FLUSH# is internally connected to a pullup resistor to prevent it from floating active when 
left unconnected. 
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Table 3-2. Tl486SXLC Terminal Functions (Continued) 


No. 


Description 


Hold Request (active high). This input indicates that another bus master requests 
control of the local bus. The bus arbitration (HOLD and HLDA) signals allow the 
microprocessor to relinquish control of its local bus when requested by another bus 
master device. Once the processor has relinquished its 3-stated bus, the bus master 
device can then drive the local bus signals. 


After recognizing the HOLD request and completing the current bus cycle or sequence 
of locked bus cycles, the microprocessor responds by floating the local bus and 
asserting the hold-acknowledge (HLDA) output. 


Once HLDA is asserted, the bus remains granted to the requesting bus master until 
HOLD becomes inactive. When the microprocessor recognizes that HOLD is inactive, 
it simultaneously drives the local bus and drives HLDA inactive. External pullup resistors 
may be required on some of the microprocessor 3-state outputs to ensure that they 
remain inactive while in a hold-acknowledge state. 


The HOLD input is not recognized while RESET is active. If HOLD is asserted while 
RESET is active, RESET has priority, and the microprocessor places the bus into an idle 
state instead of a hold-acknowledge state. The HOLD input is also recognized during 
suspend mode provided that the CLK2 input has not been stopped. HOLD is 
level-sensitive and must meet specified setup and hold times for correct operation. 


Hold Acknowledge (active high). This output indicates that the microprocessor is ina 
hold-acknowledge state and has relinquished control of its local bus. While in the 
hold-acknowledge state, the microprocessor drives HLDA active and continues to drive 
SUSPA#, if enabled. The other microprocessor outputs are in the high-impedance state, 
allowing the requesting bus master to drive these signals. If the on-chip cache can 
satisfy bus requests, the microprocessor continues to operate during hold-acknowledge 
states. A20M# is internally recognized during this time. 


The microprocessor deactivates HLDA when the HOLD request is driven inactive. The 
microprocessor stores an NMI rising edge during a hold-acknowledge state for 
processing after HOLD is inactive. The FLUSH# input is also recognized during a 
hold-acknowledge state. If SUSP# is asserted during a hold-acknowledge state, the 
microprocessor may or may not enter suspend mode depending on the state of the 
internal execution pipeline. Table 3-3 summarizes the state of the microprocessor 
signals during hold acknowledge. 


Terminal 
Name 
HOLD 4 
HLDA 3 
INTR 40 


Maskable Interrupt Request. This level-sensitive input causes the processor to 
suspend execution of the current instruction stream and begin execution of an interrupt 
service routine. The INTR input can be masked (ignored) through the Flag Word register 
IF bit. When unmasked, the microprocessor responds to the INTR input by issuing two 
locked interrupt-acknowledge cycles. To assure recognition of the INTR request, INTR 
must remain active until the start of the first interrupt-acknowledge cycle. 
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Table 3-2. TI486SXLC Terminal Functions (Continued) 


Terminal 
Name No. Description 


KEN# 29 Cache Enable (active low). This input indicates that the data returned during the 
current cycle is cacheable. When KEN# is active and the microprocessor performs a 
cacheable code-fetch or memory-data-read cycle, the cycle is transformed into acache 
fill. Use of the KEN# input to control cacheability is optional. The Noncacheable Region 
registers can also control cacheability. Memory addresses specified by the 
Noncacheable Region registers cannot be cached regardless of the state of KEN#. I/O 
accesses, locked reads, SMM address space accesses, and interrupt-acknowledge 
cycles are never cached. 


During cached code fetches, two contiguous read cycles are performed to completely 
fill the 4-byte cache line. KEN# must be asserted during both read cycles to cause a 
cache line fill. During memory data reads, the microprocessor performs as many read 
cycles as necessary to supply the required data to complete the current operation. Valid 
bits are maintained for each byte in the cache line and each block of four lines, thus 
allowing data operands of less than four bytes to reside in the cache. 


If two read cycles are performed with the same address (A23-A2), KEN# must be 
asserted during both cycles to cache the data in these cycles. If the data is cached, the 
microprocessor ignores the state of the byte enables (BHE# and BLE#), and all data 
on the bus is cached. The KEN# input is ignored following reset and can be enabled 
using the KEN bit in the CCRO Configuration register. 


KEN# is internally connected to a pullup resistor to prevent it from floating active when 
left unconnected. 


LOCK# 26 LOCK (active low). This 3-state, bus-cycle-definition signal is asserted to deny access 
to the CPU bus by other bus masters. The LOCK# signal may be explicitly activated 
during bus operations by including the LOCK prefix on certain instructions. LOCK# is 
always asserted during descriptor and page table updates, interrupt-acknowledge 
sequences, and when executing the XCHG instruction. The microprocessor does not 
enter the hold-acknowledge state in response to HOLD while the LOCK# output is 
active. 


M/lO# 23 Memory/lO. This 3-state, bus-cycle-definition signal is low during I/O read and write 
cycles and is high during memory cycles. 


NA# 6 Next Address Request (active low). This input requests address pipelining by the 
system hardware. When asserted, the system indicates that it is prepared to accept 
new bus-cycle definition and address signals (M/lIO#, D/C#, W/R#, A23-A1, BHE#, and 
BLE#) from the microprocessor even if the current bus cycle has not been terminated 
by assertion of READY#. If the microprocessor has an internal bus request pending and 
the NA# input is sampled active, the next bus-cycle definition and address signals are 
driven onto the bus. 


Nct 27,45, Make no external connection. 
46 


t Connecting or terminating (high or low) any NC terminal(s) may cause the microprocessor to produce unpredictable results or 
not operate. 
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Table 3-2. Tl486SXLC Terminal Functions (Continued) 


Terminal 


Name 
NMI 


PEREQ 


READY# 


RESET 


SMADS# 


No. 


38 


37 


33 


20 


Description 


Nonmaskable Interrupt Request. This rising-edge-sensitive input causes the processor 
to suspend execution of the current instruction stream and begin execution of an NMI 
interrupt service routine. The NMI interrupt service request cannot be masked by 
software. Asserting NMI causes an interrupt that internally supplies interrupt vector 2h 
to the CPU core. External interrupt-acknowledge cycles are not necessary since the 
NMI interrupt vector is supplied internally. Once NMI processing has started, no 
additional NMls are processed until an IRET instruction is executed. 


The microprocessor samples NMI at the beginning of each phase two (2) clock period. 
To assure recognition, NMI must be inactive for at least eight CLK2 periods and then be 
active for at least eight CLK2 periods. Additionally, specified setup and hold times must 
be met to assure recognition at a particular clock edge. 


Coprocessor Request (active high). This input indicates that the coprocessor is ready 
to transfer data to or from the CPU. The coprocessor can assert PEREQ in the process 
of executing a coprocessor instruction. The microprocessor internally stores the current 
coprocessor opcode and transfers the correct data to support coprocessor operations. 
The microprocessor employs PEREQ to synchronize the transfer of required operands. 


PEREQ is internally connected to a pulldown resistor to prevent this signal from floating 
active when left unconnected. 


Ready (active low). This input is generated by the system hardware to indicate that the 
currentbus cycle can be terminated. During a read cycle, assertion of READY# indicates 
that the system hardware has presented valid data to the CPU. When READY# is 
sampled active, the microprocessor latches the input data and terminates the cycle. 
During a write cycle, READY# assertion indicates that the system hardware has 
accepted the microprocessor output data. READY# mustbe asserted to terminate every 
bus cycle, including halt and shutdown indication cycles. 


Reset (active high). When asserted, RESET suspends all operations in progress and 
places the microprocessor into a reset state. RESET is a level-sensitive synchronous 
input and must meet specified setup and hold times to be properly recognized by the 
microprocessor. The microprocessor begins executing instructions at physical address 
location FF FFFOh approximately 400 CLK2 edges after RESET is driven inactive (low). 


While RESET is active, the microprocessor is initialized to nonclock-doubled mode (for 
the Tl486SXLC2). All other input pins except FLT# are ignored. The remaining signals 
are initialized to their reset state during the internal processor reset sequence. The reset 
signal states for the microprocessor are shown in Table 3-3. 


SMM Address Strobe (active low). SMADS#, a 3-state output, is asserted instead of the 
ADS# during SMM bus cycles.This indicates that SMM memory is being accessed. 
SMADS# floats while the CPU is in a hold-acknowledge or float state. The SMADS# 
output is disabled (floated) following reset and can be enabled using the SMI bit in the 
CCR1 Configuration register. 
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Table 3-2. TI486SXLC Terminal Functions (Continued) 


Terminal 


Name 
SMI# 


SUSP# 


SUSPA# 


Voc 
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No. 


47 


43 


44 


Description 


System Management Interrupt (active low). This 3-state, bidirectional, level-sensitive 
input/output signal is an interrupt with higher priority than the NMI interrupt. SMI# must 
be active for at least four CLK2 clock periods to be recognized by the microprocessor. 
After the SMI is acknowledged, the SMI# pin is driven low by the microprocessor for the 
duration of the SMI service routine. The SMI# input is ignored following reset and can 
be enabled using the SMI bit in the CCR1 Configuration register. 


SMI# is internally connected to a pullup resistor to prevent it from floating active when 
left unconnected. 


Suspend Request (active low). This input requests the microprocessor to enter 
suspend mode. After recognizing SUSP# as active, the processor completes execution 
of the current instruction, any pending decoded instructions, and associated bus cycles. 
In addition, the microprocessor waits for the coprocessor to indicate a not-busy status 
(BUSY# = 1) before entering suspend mode and asserting suspend acknowledgement 
(SUSPA#). 


SUSP# is internally connected to a pullup resistor to prevent it from floating active when 
left unconnected. 


Suspend Acknowledge (active low). This output indicates that the microprocessor has 
entered the suspend mode as a result of SUSP# assertion or execution of a HALT 
instruction. 


5-V Power Supply. All pins must be connected and used. 
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Table 3-2. Tl486SXLC Terminal Functions (Continued) 


Terminal 
Name No. Description 


Vss 2 Ground Pins. All pins must be connected and used. 


W/R# 25 Write/Read. This 3-state, bus-cycle-definition signal is low during read cycles (data is 
read from memory or I/O) and is high during write bus cycles (data is written to memory 
or I/O). 
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3.1.2 Signal States During Reset and Hold Acknowledge 


RESET is the highest priority input signal. When RESET is asserted, the mi- 
croprocessor aborts any current bus cycle and establishes real-mode bus- 
cycle definition with active buses. See Table 3-3 and Section 3.3, Reset Tim- 


ing and Internal Clock Synchronization, page 3-17. 


The microprocessor enters the hold-acknowledge state in response to asser- 
tion of the HOLD input. During the hold-acknowledge state, the microproces- 
sor floats all output and bidirectional signals except for HLDA and SUSPA#. 
In the hold-acknowledge state, all inputs except HOLD, FLUSH#, FLT#, 
SUSP# and RESET are ignored. See Table 3-3 and subsection 3.4.8, Hold 
Acknowledge State, page 3-39. The hold-acknowledge state lets an external 


device acquire the system bus. 


Table 3-3. TlI486SXLC Signal States During Reset and Hold Acknowledge 


Signal Name 
A20M# 
A23-A1 
ADS# 
BHE#, BLE# 
BUSY# 
D15—D0 
D/C# 
ERROR# 
FLT# 
FLUSH# 
HLDA 
HOLD 
INTR 
KEN# 
LOCK# 
M/lO# 
NA# 

NMI 
PEREQ 
READY# 
RESET 
SMADS# 
SMI# 
SUSP# 
SUSPA# 
W/R# 


Signal State 
During Reset 


Ignored 

1 

1 

0 

Initiates self test 
Float 

1 

Ignored 

Input recognized 
Ignored 

0 

Ignored 

Ignored 

Ignored 

1 

0 

Ignored 

Ignored 

Ignored 

Ignored 

Input recognized 
Float 

Ignored 

Ignored 

Float 

0 


Signal State During 
Hold Acknowledge 


Input recognized 
Float 

Float 

Float 

Ignored 

Float 

Float 

Ignored 

Input recognized 
Input recognized 
1 

Input recognized 
Input recognized 
Ignored 

Float 

Float 

Ignored 

Input recognized 
Ignored 

Ignored 

Input recognized 
Float 

Input recognized 
Input recognized 
Driven 

Float 
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3.2 Bus-Cycle Definition 


The bus-cycle-definition signals consist of four 3-state outputs (M/IO#, D/C#, 
W/R#, and LOCK#) that define the type of bus-cycle operation. Table 3—4 de- 
fines the bus cycles for the possible states of these signals. M/IO#, D/C#, and 
W/R# are the primary bus-cycle-definition signals and are driven valid as 
ADS# (address strobe) becomes active. During nonpipelined cycles, the 
LOCK# output is driven valid along with M/IO#, D/C#, and W/R#. During pipe- 
lined addressing, LOCK# is driven at the beginning of the bus cycle, which is 
after ADS# becomes active for that cycle. The bus-cycle-definition signals are 
active low and float while the microprocessor is in a hold-acknowledge or float 
state. 


Table 3-4. Tl486SXLC Bus Cycle Types 


3.2.1 


M/lO# D/C# W/R# LOCK# Bus Cycle Type 


0 0 0 0 Interrupt acknowledge 
0 0 0 1 — 

0 0 1 Xx — 

0 1 X 0 — 

0 1 0 1 I/O data read 

0 1 1 1 I/O data write 

1 0 X 0 — 

1 0 0 1 Memory code read 


Halt: A23-A1=2h, BHE#=1, and BLE#=0 
Shutdown: A23—A1=0h, BHE#=1, and BLE#=0 


1 1 0 0 Locked memory data read 
1 1 0 1 Memory data read 
1 1 1 0 Locked memory data write 
1 1 1 1 Memory data write 


X = Don’t care 
— = Does not occur 
Clock Doubling Using Software Control 


The clock-doubled feature of the TI486SXLC2 is enabled/disabled using 
Configuration Control register 0 (CCRO), bit 6. The following software sets and 
resets CKD: 


Set CKD programming sequence: 


mov al, OCOh ;select CCRO 
out 22h, al 

in al, 23h ;read CCRO 
mov ah, al ;save in AH 
or ah, 40h ;set AH<6> 
mov al, OCOh ;select CCRO 


out 22h, al 
mov al, ah 
out 23h, al ;write CCRO 
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Reset CKD programming sequence: 


mov al, OCOh ;select CCRO 
out 22h, al 

in al, 23h ;read CCRO 
mov ah, al ;save in AH 
and ah, OBFh ;reset AH<6> 
mov al, OCOh ;select CCRO 
out 22h, al 

mov al, ah 

out 23h, al ;write CCRO 


3.2.1.1 Entering Clock-Doubled Mode 


The Tl486SXLC2 microprocessors power up in the nonclock-doubled mode. 
To enter the clock-doubled mode, set CLK2 to the desired frequency inside the 
phase-locked loop (PLL) lock range (see Table 5—5 and Table 5-6) and issue 
the set-CKD-programming sequence. Approximately 20 us after the final OUT 
instruction has exited the processor pipeline, the PLL locks and the CPU 
enters clock-doubled mode. Until the PLL is locked, the processor continues 
to operate in the nonclock-doubled mode. 


3.2.1.2 Clock-Scaling Sequence 


To scale or stop CLK2 input when the processor is in clock-doubled mode, is- 
sue the reset-CKD-programming sequence. The final OUT instruction exiting 
the processor pipeline resets the CKD bit and puts the microprocessor into 
nonclock-doubled mode. This must occur before scaling or stopping the CLK2 
input to prevent a synchronization error. This may be ensured by issuing a 
JUMP instruction, such as UMP $+2, before scaling CLK2. 


To return the processor to clock-doubled mode, set CLK2 to the desired fre- 
quency inside the PLL lock range and issue the set-CKD-programming se- 
quence. Approximately 20 us after the final OUT instruction has exited the pro- 
cessor pipeline, the PLL locks and the processor enters clock-doubled mode. 


3.2.1.3 Suspend Mode 


Suspend mode can be initiated when the Tl486SXLC2 microprocessor is in 
clock-doubled mode as long as the CLK2 input is not scaled or stopped. Sus- 
pend mode does not disable the PLL; instead, changing the CLK2 frequency 
causes the PLL to lose lock. 


For more detailed information on entering and exiting suspend in nonclock- 
doubled mode, refer to subsection 3.2.2, Power Management. 


To get the lowest possible power state, bring the microprocessor out of clock- 
doubled mode, enter the suspend mode (using software or hardware), and 
stop the CLK2 input. 
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3.2.2 Power Management 


The power-management signals allow the TI486SXLC series microproces- 
sors to enter suspend mode. Suspend-modée circuitry allows the microproces- 
sor to consume minimal power while maintaining the entire internal CPU state. 


3.2.2.1. Suspend Request (SUSP#) 


Suspend request (SUSP#) is an active-low input that requests the TI486SXLC 
series microprocessors to enter suspend mode. For Tl486SXLC2 micropro- 
cessors, follow the clock-scaling sequence procedure in subsection 3.2.1.2 to 
enter nonclock-doubled mode before scaling or stopping the CLK2 input. 


After recognizing SUSP# is active, the processor completes execution of the 
current instruction, any pending decoded instructions, and associated bus 
cycles. In addition, the microprocessor waits for the coprocessor to indicate 
anot-busy condition (BUSY#=1) before entering suspend mode and asserting 
suspend acknowledge (SUSPA#). During suspend mode, internal clocks are 
stopped and only the logic for monitoring RESET, HOLD, and FLUSH# re- 
mains active. With SUSPA# asserted, the CLK2 input to the microprocessor 
can be stopped in either phase. Stopping the CLK2 input further reduces cur- 
rent required by the microprocessor. 


To resume operation, restart the CLK2 input (if stopped) and negate the 
SUSP# input. The Tl486SXLC2 processors can enter clock-doubled mode 
(subsection 3.2.1.1, Entering Clock-Doubled Mode) once the CLK2 input 
reaches the desired frequency within the PLL lock range. The processor then 
resumes instruction fetching and begins execution in the instruction stream at 
the point where it stopped. 


The SUSP# input is level sensitive and must meet specified setup and hold 
times to be recognized at a particular clock edge. The SUSP# input is ignored 
following reset and can be enabled using the SUSP bit in the CCRO Configura- 
tion register. 


3.2.2.2 Suspend Acknowledge (SUSPA#) 


The suspend acknowledge (SUSPA#) output indicates that the TI486SXLC 
series microprocessor has entered the suspend mode as a result of SUSP# 
assertion or execution of a HALT instruction. If SUSPA# is asserted and the 
CLK2 input is switching, the microprocessor continues to recognize FLT#, RE- 
SET, HOLD, and FLUSH#. In addition, the TlI486SXLC2 microprocessor may 
stay in clock-doubled mode while the CLK2 input is switching. If suspend mode 
was entered as the result of a HALT instruction, the microprocessor also con- 
tinues to monitor the NMI input and the unmasked INTR input. Detection of 
INTR or NMI forces the microprocessor to exit suspend mode and begin 
execution of the appropriate interrupt service routine. The CLK2 input to the 
processor can be stopped after SUSPA# has been asserted to reduce the 
power requirement of the microprocessor further. For this case, the 
Tl486SXLC2 microprocessor must be brought out of clock-doubled mode 
before stopping the CLK2 input to prevent a synchronization error. The 
SUSPA# output is disabled (floated) following reset and can be enabled using 
the SUSP bit in the CCRO Configuration register. 
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Table 3-5 shows the state of the TI486SXLC series microprocessor signals 


when the device is in suspend mode. 


Table 3-5. TI486SXLC Signal States During Suspend Mode 


Signal Name 
A20M# 


A23-A1 
ADS# 
BHE#, BLE# 
BUSY# 
D15—D0O 
D/C# 
ERROR# 
FLT# 
FLUSH# 
HLDA 
HOLD 
INTR 
KEN# 
LOCK# 
M/1O# 
NA# 
NMI 
PEREQ 
READY# 
RESET 
SMADS# 
SMl# 
SUSP# 
SUSPA# 
W/R# 


Signal State During 
Hold Acknowledge 


Ignored 

1 

1 

0 

Ignored 

Float 

1 

Ignored 

Input recognized 
Input recognized 
0 

Input recognized 
Latched 

Ignored 

1 

0 

Ignored 

Latched 

Ignored 

Ignored 

Input recognized 
1 

Latched 

Input recognized 
0 

0 


Signal State During Halt- 
Initiated Suspend Mode 


Ignored 

1 

1 

0 

Ignored 

Float 

1 

Ignored 

Input recognized 
Input recognized 
0 

Input recognized 
Input recognized 
Ignored 

1 

0 

Ignored 

Input recognized 
Ignored 

Ignored 

Input recognized 
1 

Input recognized 
Ignored 

0 

0 
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3.3 Reset Timing and Internal Clock Synchronization 


RESET is the highest priority input signal and interrupts any processor activity 
when itis asserted. When RESET is asserted, the microprocessor aborts any 
bus cycle. Idle, hold-acknowledge, and suspend states are also discontinued, 
and the reset state is established. RESET is used when the microprocessor 
is powered up to initialize the CPU to a known valid state and to synchronize 
the internal CPU clock with external clocks. The Tl486SXLC2 microproces- 
sors are initialized to nonclock-doubled mode when RESET goes active. 


RESET must be asserted for at least 15 CLK2 periods to ensure recognition 
by the microprocessor. If the self-test feature is invoked, RESET must be as- 
serted for at least 80 CLK2 periods. RESET pulses of less than 15 CLK2 peri- 
ods may not have sufficient time to propagate throughout the microprocessor 
and may not be recognized. RESET pulses of less than 80 CLK2 periods fol- 
lowed by a self-test request may incorrectly report a self-test failure when none 
has occurred . 


If the RESET falling edge meets specified setup and hold times, the internal 
processor clock phase is synchronized as illustrated in Figure 3-2. The 
TI486SXLC internal processor clock is half the frequency of the CLK2 input 
and each CLK2 cycle corresponds to an internal CPU clock phase (6). 
Phase two (2) of the internal clock is defined as the second rising edge of 
CLK2 following the falling edge of RESET. The Tl486SXLC2 internal core 
clock is the same frequency as the CLK2 input, and the internal bus interface 
clock is half the frequency of the CLK2 input. Phase two of the internal clock 
is defined as the second rising edge of CLK2 following the falling edge of RE- 
SET. 


Figure 3-2. TI486SXLC Internal Processor Clock Synchronization 
o2or 1 o2oro1 o2 o1 


CLk2 Ge ee ee 
RESET \ 


INTERNAL 
PROCESSOR RK RR K RY 


Tl486SXLC Microprocessor Bus Interface 3-17 


Reset Timing and Internal Clock Synchronization 


Following the falling edge of RESET (and after self test if it was requested), 
the microprocessor performs an internal initialization sequence for approxi- 
mately 400 CLK2 periods. The microprocessor self-test feature is invoked if 
the BUSY# input is in the active (low) state when RESET falls inactive. The 
self-test sequence requires approximately (220 + 60) CLK2 periods to com- 
plete. Even if the self test indicates a problem, the microprocessor attempts 
to proceed with the reset sequence. Figure 3-3 illustrates the bus activity and 
timing during the microprocessor reset sequence. 


Figure 3-3. TI486SXLC Bus Activity From RESET Until First Code Fetch 
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BUSY# should be held stable for 80 CLK2 periods before and after the CLK2 period in which RESET falling edge occurs. 


Upon completion of self-test, the EAX register contains 0000 0000h if the 
microprocessor passed its internal self test with no problems. Any nonzero val- 
ue in the EAX register indicates that the microprocessor is faulty. 
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3.4 Bus Operation and Functional Timing 


The TI486SXLC series microprocessor communicates with the external sys- 
tem through separate, parallel buses for data and address. This is commonly 
called a demultiplexed address/data bus. This demultiplexed bus eliminates 
the need for address latches required in multiplexed address/data bus config- 
urations, where the address and data are presented on the same pins at differ- 
ent times. 


TI486SXLC series microprocessor instructions can act on memory data oper- 
ands consisting of 8-bit bytes, 16-bit words, or 32-bit double words. The micro- 
processor bus architecture allows for bus transfers of these operands without 
restrictions on physical address alignment. Any byte boundary may require 
more than one bus cycle to transfer the operand. This feature is transparent 
to the programmer. 


The microprocessor data bus (D15—D0) is a 16-bit-wide bidirectional bus. The 
microprocessor drives the data bus during write bus cycles, and the external 
system hardware drives the data bus during read bus cycles. The address bus 
provides a 24-bit value. Twenty-three signals for the 23 upper-order address 
bits (A23—A1) define which 16-bit word is being accessed. Two byte-enable 
signals (BHE# and BLE#) directly indicate which of the two bytes within the 
word is active. 


Every bus cycle begins with assertion of the address strobe (ADS#). ADS# in- 
dicates that the microprocessor has issued a new address and new bus-cycle- 
definition signals. A bus cycle is defined by four signals: M/lIO#, W/R#, D/C#, 
and LOCK#. M/IO# defines whether a memory or I/O operation is occurring, 
W/R# defines the cycle as read or write, and D/C# indicates whether a data 
or control cycle is in effect. LOCK# indicates that the current cycle is a locked 
bus cycle. Every bus cycle completes when the system hardware returns 
READY# asserted. 


The TI486SXLC series microprocessor performs the following bus-cycle 
types: 


Memory read 

_j Locked memory read 

Li Memory write 

Lj Locked memory write 

(1 I/O read (or coprocessor read) 
_} 

_} 

_} 


uu 


I/O write (or coprocessor write) 
Interrupt acknowledge (always locked) 
Halt/shutdown 


When the microprocessor has no pending bus requests, the bus enters the idle 
state. There is no encoding of the idle state on the bus-cycle-definition signals; 
however, the idle state can be identified by the absence of further assertions 
of ADS# following a completed bus cycle. 


Note that all bus diagrams apply to all TlI486SXLC series microprocessors. 
The Tl486SXLC2 clock-doubled feature does not change the external micro- 
processor bus interface. 
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3.4. 


1 Bus Cycles Using Nonpipelined Addressing 


The shortest time unit of bus activity is a bus state, commonly called aT state. 
A bus state is one internal processor clock period in duration (two CLK2 peri- 
ods in nonclock-doubled mode and one CLK2 period in clock-doubled mode). 
A complete data transfer occurs during a bus cycle, composed of two or more 
bus states. 


3.4.1.1 Nonpipelined Bus States 


The first state of a nonpipelined bus cycle is called T1. During phase one (91, 
first CLK2) of T1, the address bus and bus-cycle-definition signals are driven 
valid and, to signal their availability, address strobe (ADS#) is simultaneously 
asserted. 


The second bus state of a nonpipelined cycle is called T2. T2 terminates a bus 
cycle with the assertion of the READY# input, and valid data is either read or 
written depending on the bus-cycle type. The fastest microprocessor bus cycle 
requires only these two bus states. READY# is ignored at the end of the T1 
state. 


Three consecutive bus read cycles, each consisting of two bus states, are 
shown in Figure 3-4. 


Figure 3—4. TlI486SXLC Fastest Nonpipelined Read Cycles 
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Cycle 1 Cycle 2 Cycle 3 
f#— _Nonpipelined —®4@— Nonpipelined ——®¢— Nonpipelined ——> 
(Read) (Read) (Read) 
T1 T2 T1 T2 T1 T2 


o1! 92; o1! 92) 61! 92) 01! 92) o1! 02) 1! 62) 1 


Valid 1 Valid 2 Valid 3 


Valid 1 Valid 2 Valid 3 


Fastest nonpipelined bus cycles consist of T1 and T2. 
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3.4.1.2 Nonpipelined Read and Write Cycles 


Any bus cycle can be performed with nonpipelined address timing. Figure 3-5 
shows a mixture of read and write cycles with nonpipelined address timing. 
When a read cycle is performed, the microprocessor floats its data bus, and 
the externally addressed device then drives the data. The microprocessor re- 
quires that all data-bus pins be driven to a valid logic state (high or low) at the 
end of each read cycle, when READY# is asserted. When a read cycle is ac- 
knowledged by READY# asserted in the T2 bus state, the microprocessor 
latches the information present at its data-bus pins and terminates the cycle. 


When awrite cycle is performed, the data bus is driven by the microprocessor 
beginning in phase two of T1. When a write cycle is acknowledged, the write 
data remains valid throughout phase one of the next bus state to provide write- 
data hold time. 


Figure 3-5. TlI486SXLC Various Nonpipelined Bus Cycles (No Wait States) 
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Note: Idle states are introduced arbitrarily. 
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3.4.1.3. Nonpipelined Wait States 


Once a bus cycle begins, it continues until acknowledged by the external sys- 
tem hardware using the READY# input. Acknowledging the bus cycle at the 
end of the first T2 results in the shortest possible bus cycle, requiring only T1 
and T2. However, If READY# is not immediately asserted, T2 states are re- 
peated indefinitely until the READY# input is sampled active. These intermedi- 
ate T2 states are referred to as wait states. If the external system hardware 
is not able to receive or deliver datain two bus states, READY# is withheld and 
adds at least one wait state to the bus cycle. Thus, on an address-by-address 
basis, the system is able to define how fast a bus cycle completes. 


Figure 3-6 illustrates nonpipelined bus cycles with one wait state added to 
cycles 2 and 3. READY# is sampled inactive at the end of the first T2 state in 
cycles 2 and 3. Therefore, the T2 state is repeated until READY# is sampled 
active at the end of the second T2, and the cycle is then terminated. The micro- 
processor ignores the READY# input at the end of the T1 state. 


Figure 3-6. TI486SXLC Various Nonpipelined Bus Cycles With Different Numbers of Wait 
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Note: Idle states are introduced arbitrarily. 
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3.4.1.4 Initiating and Maintaining Nonpipelined Cycles 


The bus states and transitions for nonpipelined addressing are illustrated in 
Figure 3—7. The bus can switch between four possible states: T1, T2, Ti, and 
Th. Active bus cycles consist of T1 and T2 states, with T2 repeated for wait 
states. Bus cycles always begin with a single T1 state. T1 is always followed 
by a T2 state. If a bus cycle is not acknowledged during a given T2 and NA# 
is inactive, T2 repeats, resulting ina wait state. When acycle is acknowledged 
during T2, the following state is T1 of the next bus cycle when a bus request 
is pending internally. If no internal bus request is pending, the Ti state is en- 
tered. If the HOLD input is asserted and the microprocessor is ready to enter 
the hold-acknowledge state, the Th state is entered. 


Figure 3—7. Tl486SXLC Nonpipelined Bus States 
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Bus States: 

T1 — First clock of a nonpipelined bus cycle (CPU drives new address and asserts ADS#) 

T2 — Subsequent clocks of a bus cycle when NA# has not been sampled asserted in the current bus cycle 
Ti — Idle state 

Th — Hold acknowledge (CPU asserts HLDA) 


The fastest bus cycle consists of two states: T1 and T2. 
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Due to the demultiplexed bus, address pipelining gives the external hardware 
an additional T state of access time without inserting a wait state. The proces- 
sor always uses nonpipelined address timing after the reset sequence and fol- 
lowing any idle bus state. Pipelined or nonpipelined address timing is then de- 
termined on acycle-by-cycle basis using the NA# input. When address pipelin- 
ing is not used, the address and bus-cycle definition remain valid during all wait 
states. When wait states are added and nonpipelined address timing is neces- 
sary, NA# should be negated during each T2 state of the bus cycle except the 
last one. 


3.4.2 Bus Cycles Using Pipelined Addressing 


Address pipelining lets the system request the address and bus-cycle defini- 
tion of the next internally pending bus cycle before the current bus cycle is ac- 
knowledged with READY# asserted. If address pipelining is used, the external 
system hardware has an extra T state of access time to transfer data. Address 
pipelining is controlled cycle-by-cycle by the state of the NA# input. 


3.4.2.1 Pipelined Bus States 
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Pipelined addressing is always initiated by asserting NA# during a nonpipe- 
lined bus cycle. Within the nonpipelined bus cycle, NA# is sampled at the be- 
ginning of phase two of each T2 state and is only acknowledged by the micro- 
processor during wait states. When address pipelining is acknowledged, the 
address (BHE#, BLE#, and A23—A1) and bus-cycle definition (W/R#, D/C#, 
and M/lO#) of the next bus cycle are driven before the end of the nonpipelined 
cycle. The address status output (ADS#) is asserted simultaneously to indi- 
cate validity of these signals. Once in effect, address pipelining is maintained 
in successive bus cycles by continuing to assert NA# during the pipelined bus 
cycles. 


As in nonpipelined bus cycles, the fastest bus cycles using a pipelined address 
require only two bus states. Figure 3-8 illustrates the fastest read cycles using 
pipelined address timing. The two bus states for pipelined addressing are T1P 
and T2P or T1P and T2I. The T1P state is entered following completion of the 
bus cycle in which the pipelined address and bus-cycle-definition information 
was made available, and it is the first bus state of every pipelined bus cycle. 
In other words, the T1P state follows a T2 state if the previous cycle was nonpi- 
pelined, and follows a T2P state if the previous cycle was pipelined. 


Figure 3-8. Tl486SXLC Fastest Pipelined Read Cycles 
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Cycle 1 Cycle 2 Cycle 3 
Pipelined Pipelined Pipelined 
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Valid 1 Valid 2 Valid 3 


Fastest pipelined bus cycles consist of T1P and T2P. 


Within the pipelined bus cycle, NA# is sampled at the beginning of phase two 
(2) of the T1P state. If the microprocessor has an internally pending bus re- 
quest and NA# is asserted, the T1P state is followed by a T2P state and the 
address and bus-cycle definition for the next pending bus request is made 
available. If no pending bus request exists, the T1P state is followed by a T2l 
state regardless of the state of NA# and no new address or bus-cycle informa- 
tion is driven. 


The pipelined bus cycle is terminated in either the T2P or T2I states with the 
assertion of the READY# input, and valid data is either input or output depend- 
ing on the bus cycle type. READY# is ignored at the end of the T1P state. 


3.4.2.2 Pipelined Read and Write Cycles 


Any bus cycle can be performed with pipelined address timing. When a read 
cycle is performed, the microprocessor floats its data bus and the externally 
addressed device drives the data. When a read cycle is acknowledged by 
READY# asserted in either the T2P or T2I bus state, the microprocessor 
latches the information present at its data pins and terminates the cycle. 


When awrite cycle is performed, the data bus is driven by the microprocessor 
beginning in phase two (2) of T1P. When a write cycle is acknowledged, the 
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write data remains valid throughout phase one (#1) of the next bus state to pro- 
vide write-data hold time. 


3.4.2.3 Pipelined Wait States 
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Once a pipelined bus cycle begins, it continues until acknowledged by the ex- 
ternal system hardware using the microprocessor READY# input. Acknowl- 
edging the bus cycle at the end of the first T2P or T2I state results in the short- 
est possible pipelined bus cycle. If READY# is not immediately asserted, how- 
ever, T2P or T2l states are repeated indefinitely until the READY# input is 
sampled active. Additional T2P or T2I states are referred to as wait states. 


Figure 3-9 illustrates pipelined bus cycles with one wait state added to cycles 
1 through 3. Cycle 1 is a pipelined cycle with NA# asserted during T1P anda 
pending bus request. READY# is sampled inactive at the end of the first T2P 
state in cycle 1. Therefore, the T2P state is repeated until READY# is sampled 
active at the end of the second T2P, and the cycle is then terminated. The mi- 
croprocessor ignores the READY# input at the end of the T1P state. ADS#, 
the address, and the bus-cycle-definition signals for the pending bus cycle are 
all valid during each of the T2P states. Also, asserting NA more than once dur- 
ing the cycle has no additional effect. Pipelined addressing can only output in- 
formation for the next bus cycle. 


Cycle 2 in Figure 3-9 illustrates a pipelined cycle, with one wait state, where 
NA# is not asserted until the second bus state in the cycle. In this case, the 
CPU enters the T2 state following T1P because NA# is not asserted. During 
the T2 state the microprocessor samples NA# asserted. Because a bus re- 
quest is pending internally and READY# is not active, the CPU enters the T2P 
state and asserts ADS#, a valid address, and bus-cycle-definition information 
for the pending bus cycle. The cycle is then terminated by an active READY# 
at the end of the T2P state. 


Cycle 3 of Figure 3-9 illustrates the case where no internal bus request exists 
until the last state of a pipelined cycle with wait states. In cycle 3, NA# is as- 
serted in T1P, requesting the next address. Because the CPU does not have 
an internal bus request pending, the T2I state is entered. However, by the end 
of the T2I state, a bus request exists. Because READY# is not asserted, a wait 
state is added. The CPU then enters the T2P state and asserts ADS#, a valid 
address, and bus-cycle-definition information for the pending bus cycle. As 
long as the CPU enters the T2P state at some point during the bus cycle, pipe- 
lined addressing is maintained. NA# needs to be asserted only once during the 
bus cycle to request pipelined addressing. 
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Figure 3-9. TI486SXLC Various Pipelined Cycles (One Wait State) 
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3.4.2.4 Initiating and Maintaining Pipelined Cycles 


Pipelined addressing is always initiated by asserting NA# during a nonpipe- 
lined bus cycle with at least one wait state. The first bus cycle following reset, 
an idle bus, or a hold-acknowledge state is always nonpipelined. Therefore, 
the microprocessor always issues at least one nonpipelined bus cycle follow- 
ing reset, idle, or hold acknowledge before pipelined addressing takes effect. 


Once a bus cycle is in progress and the current address has been valid for one 
entire bus state, the NA# input is sampled at the end of every phase one until 
the bus cycle is acknowledged. Once NA# is sampled active, the microproces- 
sor is free to drive a new address and bus-cycle definition on the bus as early 
as the next bus state and as late as the last bus state in the cycle. 


Figure 3—10 illustrates the fastest transition possible to pipelined addressing 
following an idle bus state. In cycle 1, NA# is driven during state T2. Thus, 
cycle 1 makes the transition to pipelined address timing, since it begins with 
T1 but ends with T2P. Because the address for cycle 2 is available before cycle 
2 begins, cycle 2 is called a pipelined bus cycle, and it begins with a T1P state. 
Cycle 2 begins as soon as READY# assertion terminates cycle 1. 


Figure 3-10. TI486SXLC Fastest Transition to Pipelined Address Following Bus-ldle State 
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Note: Following any idle bus state (Ti), the address is always nonpipelined and NA# is sampled only during wait states. To start 
address pipelining after an idle state, a nonpipelined cycle with at least one wait state (cycle 1 above) is required. The 


pipelined cycles 
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Figure 3-11 illustrates the transition to pipelined addressing during a burst of 
bus cycles. Cycle 2 makes the transition to pipelined addressing. Comparing 
cycle 2 to cycle 1 of Figure 3-10 (on page 3-28) illustrates that a transition 
cycle is the same when it occurs and consists of at least T1, T2 (NA# is as- 
serted at that time), and T2P (provided the microprocessor has an internal bus 
request already pending). T2P states are repeated if wait states are added to 
the cycle. Cycles 2, 3, and 4 in Figure 3-11 show that once address pipelining 
is achieved, it can be maintained with two-state bus cycles consisting only of 
T1P and T2P. 


Once a pipelined bus cycle is in progress, pipelined timing is maintained for 
the next cycle by asserting NA# and detecting that the microprocessor enters 
T2P during the current bus cycle. The current bus cycle must end in state T2P 
for pipelining to be maintained in the next cycle. T2P is identified by the asser- 
tion of ADS#. Figure 3-10 and Figure 3-11 each show pipelining ending after 
cycle 4. This occurs because the microprocessor does not have an internal 
bus request prior to the acknowledgment of cycle 4. 


Figure 3-11. Tl486SXLC Transition to Pipelined Address During Burst of Bus Cycles 
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Therefore, to begin address pipelining during a group of nonpipelined bus cycles requires a nonpipelined cycle with at 
least one wait state (cycle 2 above). 
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The complete bus-state-transition diagram, including operation with pipelined 
address, is given in Figure 3-12. This is a superset of the diagram for nonpipe- 
lined address. The three additional bus states for pipelined address are 


shaded. 


Figure 3-12. Tl486SXLC Complete Bus States 
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Bus States: 


T1 — First clock of a nonpipelined bus cycle (CPU drives new address and asserts ADS#) 

T2 — Subsequent clocks of a bus cycle when NA# has not been sampled asserted in the current bus cycle 

T2| — Subsequent clocks of a bus cycle when NA# has been sampled asserted in the current bus cycle but there 
is not yet an internal bus request pending (CPU does not drive a new address or assert ADS#) 

T2P— Subsequent clocks of a bus cycle when NA# has been sampled asserted in the current bus cycle and 
there is an internal bus request pending (CPU drives new address and asserts ADS#) 


T1P-— First clock of a pipelined bus cycle 


Ti — Idle state 
Th — Hold acknowledge state (CPU asserts HLDA) 
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3.4.3 Locked Bus Cycles 


When the LOCK# signal is asserted, the Tl486SXLC series microprocessors 
do not allow other bus master devices to gain control of the system bus. 
LOCK# is driven active in response to executing certain instructions with the 
LOCK prefix. The LOCK prefix allows indivisible read/modify/write operations 
on memory operands. LOCK# is also active during interrupt-acknowledge 
cycles. 


LOCK# is activated on the CLK2 edge that begins the first locked bus cycle 
and is deactivated when READVY¢# is returned at the end of the last locked bus 
cycle. When the microprocessor is using nonpipelined addressing, LOCK# is 
asserted during phase one ($1) of T1. When it is using pipelined addressing, 
LOCK# is driven valid during phase one of T1P. 


Figure 3—4 through Figure 3-6 on pages 3-20 through 3-22 illustrate LOCK# 
timing during nonpipelined cycles. Figure 3-8 through Figure 3-11 on pages 
3-25 through 3-29 cover the pipelined-address case. 


3.4.4 Interrupt-Acknowledge Cycles 


The TI486SXLC series microprocessors are interrupted by an external source 
via an input request on the INTR input (when interrupts are enabled). The mi- 
croprocessor responds with two locked interrupt-acknowledge cycles. These 
bus cycles are similar to read cycles. Each cycle is terminated by READY# 
sampled active as shown in Figure 3-13. 


TI486SXLC Microprocessor Bus Interface 3-31 


Bus Operation and Functional Timing 


Figure 3-13. TI486SXLC Interrupt-Acknowledge Cycles 
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Note: Interrupt vector (0-255) is read on D7—D0 at the end of the second interrupt-acknowledge bus cycle. Because each inter- 
rupt- acknowledge bus cycle is followed by idle bus states, asserting NA# has no practical effect. 


The state of the A2 pin distinguishes the first and second interrupt-acknowl- 
edge cycles. The address driven during the first interrupt-acknowledge cycle 
is 4h (A23—A3, A1, BLE#=0; A2, BHE#=1). The address driven during the se- 
cond interrupt-acknowledge cycle is Oh (A23—A1, BLE#=0; BHE#=1). 


To assure that the interrupt-acknowledge cycles are executed indivisibly, the 
LOCK# output is asserted from the beginning of the first interrupt-acknowl- 
edge cycle until the end of the second interrupt-acknowledge cycle. In clock- 
doubled mode, four idle bus states (Ti) are inserted by the microprocessor 
between the two interrupt-acknowledge cycles. In nonclock-doubled mode, 
eight idle bus states are inserted. 


The interrupt vector is read at the end of the second interrupt cycle. The 
microprocessor reads the vector from D7—DO of the data bus. The vector 
indicates the specific interrupt number (from 0-255) requiring service. 
Throughout the balance of the two interrupt cycles, D15—D0 float. At the end 
of the first interrupt-acknowledge cycle, any data presented to the micropro- 
cessor is ignored. 
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3.4.5 Halt and Shutdown Cycles 


Executing the HLT instruction or detecting a severe error causes the micropro- 
cessor to halt operation or shutdown further processing. The microprocessor 
signals a halt or shutdown through a halt- or shutdown-indication cycle, 
respectively. 


3.4.5.1 Halt Indication Cycle 


Executing the HLT instruction causes the microprocessor execution unit to 
cease operation. The microprocessor signals its entrance into the halt state 
by performing a halt indication cycle. The halt indication cycle is identified by 
the state of the bus-cycle-definition signals (M/lO#=1, D/C#=0, W/R#=1, and 
LOCK#=1) and an address of 2h (A23—A2=0, A1=1, BHE#=1, and BLE#=0). 


The halt indication cycle must be acknowledged by asserting READY#. A 
halted microprocessor resumes execution when INTR (if interrupts are en- 
abled), NMI, SMI#, or RESET is asserted. Figure 3-14 illustrates a nonpipe- 
lined halt cycle. 
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Figure 3-14. Tl486SXLC Nonpipelined Halt Cycle 
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3.4.5.2 Shutdown Indication Cycle 


Shutdown occurs when the microprocessor detects a severe error that pre- 
vents further processing. The Tl486SXLC series microprocessor shuts down 
as a result of a protection fault while attempting to process a double fault as 
well as the conditions referenced in Chapter 2, Programming Interface. A shut- 
down indication cycle is performed, which signals the microprocessor’s en- 
trance into the shutdown state. The shutdown indication cycle is identified by 
the state of the bus-cycle-definition signals (M/lIO#=1, D/C#=0, W/R#=1, and 
LOCK#=1) and an address of Oh (A23—A1=0, BHE#=1, and BLE#=0). The 
shutdown indication cycle must be acknowledged by asserting READY#. A 
shutdown microprocessor resumes execution when NMI or RESET is as- 
serted. Figure 3-15 illustrates a shutdown cycle using pipelined addressing. 


Figure 3-15. TI486SXLC Pipelined Shutdown Cycle 
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3.4.6 


3.4.6.1. Cache Fills 


Internal Cache Interface 


The TI486SXLC cache is an 8K-byte write-through unified instruction/data 
cache with lines that are allocated only during memory read cycles. The cache 
is configured as two-way set associative. The cache organization consists of 
1024 sets, each containing two lines of four bytes each. 


Any unlocked memory-read cycle can be cached by the TI486SXLC series mi- 
croprocessor. The microprocessor does not automatically cache accesses to 
memory addresses specified by the Noncacheable-Region registers. Addi- 
tionally, the KEN# input can be used to enable caching of memory accesses 
on acycle-by-cycle basis. The microprocessor acknowledges the KEN# input 
only if the KEN enable bit is set in the CCRO Configuration register. 


As shown in Figure 3-16 and Figure 3-17, the microprocessor samples the 
KEN# input one CLK2 period before READY# is sampled active. If KEN# is 
asserted and the current address is cacheable, the microprocessor fills two by- 
tes of a line in the cache with the data present on the data bus pins. The states 
of BHE# and BLE# are ignored if KEN# is asserted for the cycle. 


Figure 3-16. Tl486SXLC Nonpipelined Cache Fills Using KEN# 
(With Different Numbers of Wait States) 
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Figure 3-17. Tl486SXLC Pipelined Cache Fills Using KEN# (With Different Numbers of 
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3.4.6.2 Flushing the Cache 


To maintain cache coherency with external memory, the TI486SXLC series mi- 
croprocessor cache contents should be invalidated when previously cached 
data is modified in external memory by another bus master. The microproces- 
sor invalidates the internal cache contents during execution of the INVD and 
WBINVD instructions following assertion of: 


1 HLDA if the BARB bit is set in the CCRO Configuration register 
[) FLUSH# if the FLUSH bit is set in CCRO 


The microprocessor samples the FLUSH# input on the rising edge of CLK2 
corresponding to the beginning of phase two (#2) of the internal processor 
clock. If FLUSH# is asserted, the microprocessor invalidates the entire con- 
tents of the internal cache. The actual point in time when the cache is invali- 
dated depends upon the internal state of the execution pipeline. FLUSH# must 
be asserted for at least two CLK2 periods and must meet specified setup and 
hold times to be recognized on a specific CLK2 edge. 
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3.4.7 Address Bit-20 Masking 


The TI486SXLC series microprocessor can be forced to provide 8086 1M-byte 
address wraparound compatibility by setting the A20M bit in the CCRO Config- 
uration register and asserting the A20M# input. When the A20M# is asserted, 
the 20th bit in the address to both the internal cache and the external bus pin 
is masked (zeroed). 


As shown in Figure 3—18, the microprocessor samples the A20M# input on the 
rising edge of CLK2 corresponding to the beginning of phase two (¢2) of the 
internal processor clock. If A20M# is asserted and paging is not enabled, the 
microprocessor masks the A20 signal internally starting with the next cache 
access and externally starting with the next bus cycle. If paging is enabled, the 
A20 signal is not masked regardless of the state of AZOM#. The A20 signal re- 
mains masked until the access following detection of an inactive state on the 
A20M# pin. A20M# must be asserted for a minimum of two CLK2 periods and 
must meet specified setup and hold times to be recognized on a specific CLK2 
edge. 


Figure 3-18. TlI486SXLC Masking A20 Using A20M# During Burst of Bus Cycles 


Cycle 1 Cycle 2 Cycle 3 Cycle 4 

Idle Nonpipelined Nonpipelined Pipelined Pipelined Idle 

(Write) (Read) (Write) (Write) 
md >< 


Ti 71 T2 71 T2 T2P T1P T2P T1P T2l Ti 
X 


A19-A1, 
EH, BLEW SAAN Vaid t XX Vaid OX Valid Xai 4 RRR 
BHE#, BLE#, NS Valid 1 X Valid 2 X Valid 3 XK Valid 4 ROLY 


WX 
XX ROO a 
M/lO#, D/C# 


TXRNRNKSNY ALU ALACOCOACU ACOA 
WIRE SRY ESR 


DAAKA 


ADS# 


A20M# Pe 


y 
XXX AD : : DOK KKAAKKKA 
A20 SOK _Valld 1 Valid 4 | RRR 


EXXXRXY BXXKKKKKRERKKK 
AASLLaterene MM ALOrararereseserererararenene 


2 


LAU ALAALACALAEAL ALAC ACLACLACL AC ACLACLACLACI RIO 
NAF SSSA ESO 


DAA 4 DAA XXA 


5. 
>. 


RRR RRM EXETER 
READY F iOS 1 ARR 


LAAAA LALA DABASAAY 


LO BXKKIN) 
WRK ANCCCCOON 


a 
1S 


EX 


SEEK vat Xsan a 
LOCK# OO Valid 1 X Valid 2 X Valid 3 X Valid 4 RY 
D18-00 4-5 -{h2) +-na)—— 


3-38 


Bus Operation and Functional Timing 


An alternative to using the A20M# pin is to set the NCO bitin the CCRO Configu- 
ration register. When the NCO bit is set, the microprocessor does not automati- 
cally cache accesses to the first 64K bytes and to 1M byte + 64K bytes. This 
prevents data within the wraparound memory area from residing in the internal 
cache and eliminates the need for masking address A20 to the internal cache. 


3.4.8 Hold-Acknowledge State 


The hold-acknowledge state lets an external device ina Tl486SXLC micropro- 
cessor system acquire the system bus while the microprocessor is held in an 
inactive bus state. This allows external bus masters to take control of the 
microprocessor bus and directly access system hardware in a shared manner. 
The microprocessor continues to execute instructions out of the internal cache 
(if enabled) until a system bus cycle is required. 


The hold-acknowledge state (Th) is entered in response to assertion of the 
HOLD input. In the hold-acknowledge state, the microprocessor floats all out- 
put and bidirectional signals, except for HLDA and SUSPA#. HLDA is asserted 
as long as the microprocessor remains in the hold-acknowledge state. All in- 
puts except HOLD, FLUSH#, FLT#, SUSP# and RESET are ignored. 


State Th can be entered directly from a bus-idle state, as in Figure 3-19, or 
after the completion of the current physical bus cycle if the LOCK signal is not 
asserted, as in Figure 3-20 and Figure 3-21. The CPU samples the HOLD in- 
put on the rising edge of CLK2 corresponding to the beginning of phase one 
(1) of the internal processor clock. HOLD is a synchronous input and can be 
asserted at any CLK2 edge, provided setup and hold requirements are met in 
every bus state. 


The hold-acknowledge state is exited in response to the HOLD input being ne- 
gated. The next bus start is an idle state (Ti) if no bus request is pending, as 
in Figure 3-19. lf an internal bus request is pending, as in Figure 3-20 and 
Figure 3-21, the next bus state is T1. State Th is also exited in response to 
RESET being asserted. If HOLD remains asserted when RESET goes inac- 
tive, the microprocessor enters the hold-acknowledge state before performing 
any bus cycles, provided HOLD is still asserted when the CPU is ready to per- 
form its first bus cycle. 


If a rising edge occurs on the edge-triggered NMI input while in state Th, the 
event is remembered as a nonmaskable interrupt 2 and is serviced when the 
state is exited. 
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Figure 3-19. TI486SXLC Requesting Hold From Bus-ldle State 
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Notes: 1) HOLD is asynchronous input and can be asserted at any CLK2 edge, provided setup and hold requirements are 
met in every bus state. Violating setup or hold requirements results in incorrect operation. 


2) For maximum design flexibility, the CPU has no internal pullup resistors on its outputs. External pullups may be re- 
quired on ADS# and other outputs to keep them negated during the hold-acknowledge period. 
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Figure 3-20. Tl486SXLC Requesting Hold From Active Nonpipelined Bus 
Cycle 1 Hold Acknowledge Cycle 2 
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Note: HOLD is asynchronous input and can be asserted at any CLK2 edge, provided setup and hold requirements are met in 
every bus state. Violating setup or hold requirements results in incorrect operation. 
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Figure 3-21. Tl486SXLC Requesting Hold From Active Pipelined Bus 
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Note: HOLD is asynchronous input and can be asserted at any CLK2 edge, provided setup and hold requirements are met in 
every bus state. Violating setup or hold requirements will result in incorrect operation. 


3.4.9 Coprocessor Interface 
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The data-bus, address-bus, and bus-cycle-definition signals, and the copro- 
cessor interface signals (PEREQ, BUSY#, and ERROR#), control commu- 
nication between the Tl486SXLC microprocessor and a coprocessor. The mi- 
croprocessor decodes coprocessor or ESC opcodes and transfers the opcode 
and operands to the coprocessor via I/O port accesses. Address 80 OOF8h 
functions as the control-port address, and 80 OOFCh and 80 OOFEh are used 
for operand transfers. 
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Coprocessor cycles can be read or write and can be nonpipelined or pipelined. 
Coprocessor cycles must be terminated by READY# and, as with any other 
bus cycle, can be terminated as early as the second bus state of the cycle. 


BUSY#, ERROR#, and PEREQ are asynchronous level-sensitive inputs that 
synchronize CPU and coprocessor operation. All three signals are sampled 
at the beginning of phase one (1) and must meet specified setup and hold 
times to be recognized at a given CLK2 edge. 


3.4.10 SMM Interface 


System management mode (SMM) uses two TI486SXLC microprocessor 
pins, SMl# and SMADS#. The bidirectional SMI# pin is a nonmaskable inter- 
rupt that is a higher priority than the NMI input. SMI# must be active for at least 
four CLK2 periods to be recognized by the microprocessor. Once the micro- 
processor recognizes the active SMI# input, the CPU drives the SMI# pin low 
for the duration of the SMI service routine. 


The SMADS# pin outputs the SMM address strobe that indicates an SMM 
memory bus cycle is in progress and a valid SMM address is on the address 
bus. The SMADS# functional timing, output delay times, and float delay times 
are identical to the main memory address strobe (ADS#) timing. 


3.4.10.1 SMI Handshake 


The functional timing for the SMI# interrupt is shown in Figure 3-22. Five sig- 
nificant events take place during an SMI# handshake: 


1) The SMI# input pin is driven active (low) by the system logic. 

2) The CPU samples SMI# active on the rising edge of CLK2 phase one ($1). 

3) Four CLK2 edges after sampling the SMI# active, the CPU switches the 
SMI# pin to an output and drives SMI# low. 

4) Following execution of the RSM instruction, the CPU drives the SMI# pin 
high for two CLK2 edges indicating completion of the SMI service routine. 

5) The CPU stops driving the SMI# pin high and switches the SMI# pin to an 
input in preparation for the next SMI interrupt. The system logic is respon- 
sible for maintaining the SMI# pin at the inactive (high) level after the pin 
has been changed to an input. 


Figure 3-22. Tl486SXLC SMI# Timing 
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Indicates that Tl486SXLC drives the SMI# pin. 


3.4.10.2 I/O Trapping 


The TI486SXLC series provides I/O trapping to facilitate power management 
of I/O peripherals. When an I/O bus cycle is issued, the I/O address is driven 
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onto the address bus and can be decoded by external logic. If a trap to the SMI 
handler is required, the SMI# input should be activated at least three CLK2 
edges before returning the READY# input for the I/O cycle. The timing for 
creating an I/O trap via the SMI# input is shown in Figure 3-23. The micropro- 
cessor immediately traps to the SMI interrupt handler following execution of 
the I/O instruction. No other instructions are executed between completing the 
I/O instruction and entering the SMI service routine. The I/O trap mechanism 
is not active during coprocessor accesses. 


Figure 3-23. Tl486SXLC I/O Trap Timing 
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3.4.11 Power Management 


The power-management features in the Tl486SXL(C) family of microproces- 
sors allow a dramatic reduction in the current required when the microproces- 
sor is in suspend mode (typically less than three percent of the operating cur- 
rent). Suspend mode is entered either by a hardware- or software-initiated 
action. 


Using the hardware to initiate suspend mode involves a two-pin handshake 
using the SUSP# and SUSPA# signals. Using the software involves initiating 
the suspend mode through execution of the HALT instruction. Additional pow- 
er management can be achieved by stopping and restarting the input clock. 
This technique is available because the TlI486SXLC series microprocessors 
are static devices, meaning that the clock can be stopped and restarted with- 
out loss of any internal CPU data. See subsection 3.4.11.3, Stopping the Input 
Clock, on page 3-47. 


3.4.11.1 SUSP#-Initiated Suspend Mode 
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The TI486SXLC series microprocessor enters suspend mode when the 
SUSP# input is asserted and execution of the current instruction, any pending 
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decoded instructions, and associated bus cycles are completed. The micro- 
processor also waits for the coprocessor to indicate a not-busy status 
(BUSY#=1) before entering suspend mode. The SUSPA# output is then as- 
serted. The microprocessor responds to SUSP# and asserts SUSPA# only if 
the SUSP bit is set in the CCRO Configuration register. 


Figure 3—24 illustrates the microprocessor functional timing for SUSP#-initi- 
ated suspend mode. SUSP# is sampled on the phase two (2) CLK2 rising 
edge and must meet specified setup and hold times to be recognized at a par- 
ticular CLK2 edge. The time from assertion of SUSP# to activation of SUSPA# 
varies depending on which instructions were decoded prior to assertion of 
SUSP#. The minimum time from SUSP# sampled active to SUSPA# asserted 
is two CLK2 periods. As a maximum, the microprocessor can execute up to 
two instructions and associated bus cycles before asserting SUSPA#. The 
time required for the microprocessor to deactivate SUSPA# once SUSP# has 
been sampled inactive is four CLK2 periods. 


Figure 3-24. Tl486SXLC SUSP#-Initiated Suspend Mode 
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If the microprocessor is in a hold-acknowledge state and SUSP# is asserted, 
the processor may or may not enter suspend mode depending on the state of 
the microprocessor internal execution pipeline. If the microprocessor is in a 
SUSP#-initiated suspend state and the CLK2 input is not stopped, the proces- 
sor recognizes and acknowledges the HOLD input. The microprocessor 
stores the occurrence of FLUSH#, NMI, and INTR (if enabled) for execution 
once suspend mode is exited. 
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3.4.11.2 HALT-Initiated Suspend Mode 


The TI486SXLC series microprocessor also enters suspend mode as a result 
of executing a HALT instruction. The SUSPA# output is asserted no more than 
17 CLK2 periods following a READY# sampled active for the HALT bus cycle 
as shown in Figure 3-25. Suspend mode is then exited upon recognition of an 
NMI or an unmasked INTR. SUSPA# is deactivated 12 CLK2 periods after 
sampling an active NMI or unmasked INTR. If the microprocessor is in a HALT- 
initiated suspend mode and the CLk2 input is not stopped, the processor rec- 
ognizes and acknowledges the HOLD input. The microprocessor stores the 
occurrence of FLUSH# for execution once suspend mode is exited. 


Figure 3-25. Tl486SXLC HALT-Initiated Suspend Mode 
Nonpipelined HALT 
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3.4.11.3. Stopping the Input Clock 


Because the TI486SXLC series microprocessors are static devices, the input 
clock (CLK2) can be stopped and restarted without loss of any internal CPU 
data. This assumes that the Tl486SXLC2 microprocessor is in nonclock- 
doubled mode when the input clock is stopped. (Refer to subsection 3.2.1, 
Clock Doubling Using Software Control, page 3-13.) CLK2 can be stopped in 
either phase one ($1) or phase two (#2) of the clock and in either a logic-high 
or logic-low state. However, entering suspend mode before stopping CLK2 
dramatically reduces the CPU current requirements. Therefore, the recom- 
mended sequence for stopping CLK2 in the TI486SXLC2 series microproces- 
sor from clock-doubled mode is: 


1) Bring the microprocessor out of clock-doubled mode 
2) Initiate suspend mode 

3) Wait for the microprocessor to assert SUSPA# 

4) Stop the input clock 


ee aS SesS={jwvooaSaj{_—aSannaponpnpnmw{ Monn —MMnVMMnMnMa—mwMmmoasaVooooqown 
Note: 


Suspend mode can be entered while in clock-doubled mode as long as CLK2 


is not scaled or stopped. 
[a | 


For all other cases, including the Tl486SXLC2 in nonclock-doubled mode, the 
recommended sequence is: 


1) Initiate suspend mode 
2) Wait for the microprocessor to assert SUSPA# 
3) Stop the input clock 


The TI486SXLC series microprocessor remains suspended until CLK2 is re- 
started and suspend mode is exited as described above. While CLK2 is 
stopped, the microprocessor can no longer sample and respond to any input 
stimulus including the HOLD, FLUSH#, NMI, INTR, and RESET inputs. 
Figure 3—26 illustrates the recommended sequence for stopping CLK2 using 
SUSP# to initiate suspend mode. CLK2 should be stable for a minimum of 10 
clock periods before SUSP# is negated. 


Figure 3-26. Tl486SXLC Stopping CLK2 During Suspend Mode 
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3.4.12 Float 


Activating the FLT# input floats all TlI486SXLC bidirectional and output signals. 
Asserting FLT# electrically isolates the microprocessor from the surrounding 
circuitry. This feature is useful in board-level test environments. Since the mi- 
croprocessor is packaged in a surface-mount QFP, it is not usually socketed 
and cannot be removed from the motherboard when in-circuit emulation (ICE) 
is needed. Float capability allows connection of an emulator by clamping the 
emulator probe onto the microprocessor QFP without removing it from the cir- 
cuit board. 


FLT# is an asynchronous, active-low input. It is recognized on the rising edge 
of CLK2. When recognized, it aborts the current bus state and floats the out- 
puts of the microprocessor as shown in Figure 3-27. FLT# must be asserted 
for a minimum of 16 CLK2 cycles. To exit the float condition, RESET should 
be asserted and held asserted until after FLT# is negated. 


Asserting the FLT# input unconditionally aborts the current bus cycle and 
forces the microprocessor into the float mode. As a result, the microprocessor 
is not guaranteed to enter float in a valid state. After deactivating FLT#, the 
CPU is not guaranteed to exit float in a valid state. The microprocessor RESET 
input must be asserted before exiting float to ensure that the microprocessor 
is reset and that it returns in a valid state. 


Figure 3-27. Tl486SXLC Entering and Exiting Float 
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TI486SXL Microprocessor Bus Interface 


This chapter summarizes the TI486SXL series processor signals and 
describes all inputs/outputs, functional timing and bus operations (including 
pipelined and nonpipelined addressing), various interfaces, and power man- 


agement. 
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4.1 Input/Output Signals 


This section describes the TI486SXL series microprocessors’ input and output 
signals. The discussion of these signals is arranged by the functional groups 


shown in Figure 4—1. Table 4—1 gives a brief description of each signal. 


Figure 4—1. Tl486SXL Functional Signal Groupings 
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Table 4—1. Tl486SXL Signal Summary 


Signal 
ADS# 
A20M# 
A31-A2 
BE3#-BE0# 
BS16# 
BUSY# 
CLK2 
D31-Do 
D/C# 
ERROR# 
FLT#t 
FLUSH# 
HLDA 
HOLD 
INTR 
KEN# 
LOCK# 
MEMW#t 
M/lO# 
NA# 
NMI 
PEREQ 
READY# 
RESET 
SMADS# 
SMI# 
SUSP# 
SUSPA# 
W/R#+t 


Signal Name 

Address strobe 

Address bit-20 mask 
Address bus lines 

Byte enables 

Bus size 16 

Processor extension busy 
2X clock input 

Data bus 

Data/control 

Processor extension error 
Float 

Cache flush 

Hold acknowledge 

Hold request 

Maskable interrupt request 
Cache enable 

Bus lock 

ISA memory write 
Memory/input-output 


Next address request 


Nonmaskable interrupt request 


Processor extension request 
Bus ready 

Reset 

SMM address strobe 


System management interrupt 


Suspend request 
Suspend acknowledge 
Write/read 


t 144-pin QFP and 168-pin PGA pinout only. 
f 144-pin QFP has W/R# on pins 36 and 37. These terminals must be connected together. 
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Signal Group 
Bus-cycle control 

None 

Address bus 

Address bus 

Bus-cycle control 
Coprocessor interface 
None 

None 

Bus-cycle definition 
Coprocessor interface 
None 

Internal cache interface 
Bus arbitration 

Bus arbitration 
Interrupt control 
Internal Cache interface 
Bus-cycle definition 
Internal cache interface 
Bus-cycle definition 
Bus-cycle control 
Interrupt control 
Coprocessor interface 
Bus-cycle control 

None 

Bus-cycle control 
Interrupt control 

Power management 
Power management 


Bus-cycle definition 


The following sections describe the signals and their functional characteris- 
tics. Additional signal information can be found in Chapter 5, Electrical Specifi- 
cations. Chapter 5 documents the dc and ac characteristics for the signals in- 
cluding voltage levels, propagation delays, setup times, and hold times. Speci- 
fied setup and hold times must be met for proper operation of the TI486SXL 
series microprocessors. 
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4.1.1 TI486SXL Terminal Function Descriptions 


A20M# 


4-4 


F13 


Table 4—2 identifies and describes each of the TI486SXLC package terminals. 
Table 4-2. TI486SXL Terminal Functions 


Terminal 

No. 

144- 168- 
pin pin 
73 Q14 
74 R15 
75 $16 
76 Q12 
77 $15 
78 Q13 
86 R13 
87 Qi 
88 $13 
89 R12 
90 S7 
93 Q10 
94 $5 
95 R7 
104 Qg 
106 Q3 
107 R5 
108 Q4 
109 Q8 
110 Q5 
113 Q7 
114 $3 
61 Q6 
60 R2 
59 $2 
58 $1 
84 R1 
83 P2 
82 P3 
81 Q1 
26 $17 
43 D15 


Description 


Address Bus (active high). The address bus (A31—A2) signals are three- 
state outputs that provide addresses for physical memory and I/O ports. All 
address lines can be used to address physical memory, which allows a 
4G-byte address space (0000 0000h to FFFF FFFFh). During I/O port 
accesses, A31—A16 are driven low (except for coprocessor accesses). This 
permits a 64-Kbyte I/O address space (0000 0000h to 0000 FFFFh). 


During all coprocessor I/O accesses, address lines A30—A16 are driven low 
and A31 is driven high. This allows A31 to be used by external logic to 
generate a coprocessor select signal. Coprocessor command transfers 
occur with address 8000 OOF8h. Coprocessor data transfers occur with 
address 8000 00FCh. A31-—A2 float while the CPU is in a hold-acknowledge 
or float state. 


Address Strobe (active low). This 3-state output indicates that the TI486SXL 
microprocessor has driven a valid address (A381—A2 and BE3#—BE0#) and 
bus-cycle definition (M/IO#, D/C#, and W/R#) on the appropriate output pins. 
During nonpipelined bus cycles, ADS# is active for the first clock of the bus 
cycle. During address pipelining, ADS# is asserted during the previous bus 
cycle and remains asserted until READY# is returned for that cycle. ADS# 
floats while the microprocessor is in a hold-acknowledge or float state. 


Address Bit-20 Mask (active low). This input causes the microprocessor to 
mask (force low) physical address bit 20 when driving the external address 
bus or performing an internal cache access. When the processor is in real 
mode, asserting A2Z0OM# emulates the 1M-byte address wraparound that 
occurs on the 8086. The A20 signal is never masked when paging is enabled 
regardless of the state of the A2OM# input. The A20M# input is ignored 
following reset and can be enabled using the A20M bit in the CCRO 
Configuration register. 


A20M¢ is internally connected to a pullup resistor to prevent it from floating 
active when left unconnected. 
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Table 4-2. TlI486SXL Terminal Functions (Continued) 


Name 


BE3# 
BE2# 
BE1# 
BEO# 


BS16# 


BUSY# 


CLK2 


132- 
pin 


A13 
B13 
C13 
E12 


C14 


B9 


F12 


Terminal 
No. 
144- 
pin 

32 
31 
28 
27 


115 


48 


25 


168- 
pin 


F17 
J15 
J16 
K15 


C17 


S4 


C3 


Description 


Byte Enables BE3#—BE0# (active low). These 3-state outputs determine 
which bytes within the 32-bit data bus are transferred during a memory or I/O 
access (Table 4—3). During a memory write, one or both of the upper bytes 
(D and C) of the data bus can be duplicated in the lower bytes (B and A) of 
the bus. This duplication is dependent on BE3#—BE0# as listed in Table 4—4. 


Generating A1—A0O using BE3#—BE0# is determined with the following 
equations: 

AO = (BEO# ¢ BE2#) + (BEO# « BE1#) 

Ai = BEO# e BE1# 
The relationship between Ai—A0 and BE3#-—BE0# is shown in Table 4-5. 


Bus Size 16 (active low). This input allows connection of the 32-bit 
microprocessor data bus to an external 16-bit data bus. When this input is 
activated, the microprocessor performs multiple bus cycles to couple read 
and write accesses from devices that cannot provide (accept) 32 bits of data 
in a single cycle. During bus cycles with BS16# active, data is transferred 
using data bus signals D15—D0 only. 


Coprocessor Busy (active low). This input indicates to the TI486SXL that the 
coprocessor is currently executing an instruction and is unable to accept 
another opcode. When the microprocessor encounters a WAIT instruction or 
any coprocessor instruction that operates on the coprocessor stack (i.e., 
load, pop, or arithmetic operation), BUSY# is sampled. BUSY# is continually 
sampled and must be recognized as inactive before the CPU supplies the 
coprocessor with another instruction. However, coprocessor instructions 
FNINIT, FNCLEX are allowed to execute even if BUSY# is active because 
they are used for coprocessor initialization and exception clearing. 


BUSY¢# is internally connected to a pullup resistor to prevent it from floating 
active when left unconnected. 


2X Clock Input (active high). This input signal is the basic timing reference 
for TI486SXL series microprocessors. The CLK2 input is internally divided by 
two to generate the internal processor clock. The external CLK2 is 
synchronized to a known phase of the internal processor clock by the falling 
edge of the RESET signal. External timing parameters are defined with 
respect to the rising edge of CLK2. 


For the Tl486SXL2 microprocessors, the CLK2 input is used internally to 
generate the internal core processor clock and the internal bus interface 
clock. The external CLK2 is synchronized to a known phase of the internal 
processor clock by the falling edge of the RESET signal. External timing 
parameters are defined with respect to the rising edge of CLK2. 
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Table 4-2. TI486SXL Terminal Functions (Continued) 


Terminal 
No. 
132- 144- 168- 
Name pin’ pin pin _ Description 
D/C# Al 35 M15 Data/Control. This 3-state, bus-cycle-definition signal is low during control 
cycles and is high during data cycles. Control cycles are issued during 
functions such as a halt instruction, interrupt servicing, and code fetching. 
Data bus cycles include data access from either memory or I/O. 
DO H12 1 Pi Data Bus (active high). The data bus signals (D31—D0) are 3-state 
D1 H13 144 N2 __ bidirectional signals that provide the data path between the microprocessor, 
D2 H14 143 N1 the external memory, and the I/O devices. The data-bus inputs receive data 
D3 J14 137 H2 during memory read, I/O read, and interrupt-acknowledge cycles and 
D4 K14 136 M3 delivers output data during memory and I/O write cycles. Data read 
D5 K1i3 135 J2 operations require that specified data setup and hold times be met for correct 
D6 L1i4 134 L2 operation. The data bus signals float while the CPU is in a hold-acknowledge 
D7 Ki2 133 L3 or float state. 
D8 L13. 131 F2 
D9 N14 130 D1 
D10 M12 129 E3 
D11 N13. 128 C1 
D12 N12 127 G8 
D13 P13 = 118 D2 
D14 P12 117 K3 
D15 M11 = 116 F3 
D16 N11 9 124 J3 
D17 N10 123 D3 
D18 P11 122 C2 
D19 P10 121 B1 
D20 M9 102 Atl 
D21 NQ 101 B2 
D22 P9 100 A2 
D23 N8 99 A4 
D24 P7 3 A6 
D25 N6 4 B6 
D26 P5 142 C7 
D27 N5 141 C6 
D28 M6 12 C8 
D29 P4 13 A8 
D30 P3 14 C9 
D31 M5 15 B8 
ERROR# A8 49 A12  Coprocessor Error (active low). This input indicates that the coprocessor 
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generated an error during execution of an instruction. ERROR# is sampled 
by the microprocessor whenever a coprocessor instruction is executed. If 
ERROR# is sampled active, the processor generates exception 16, which is 
then serviced by the exception handling software. 


The following coprocessor instructions, which involve clear coprocessor 
error flags and save the coprocessor state, do not generate an exception 16 
even if ERROR# is active: FNINIT, FNCLEX, FNSTSW, FNSTCW, 
FNSTENV, FNSAVE. 


ERROR# is internally connected to a pullup resistor to prevent it from floating 
active when left unconnected. 


Input/Output Signals 


Table 4-2. TlI486SXL Terminal Functions (Continued) 


Name pin 
FLT# — 


FLUSH# E13 


HOLD D14 


Terminal 
No. 
144- 
pin 

40 


42 


168- 
pin 
C11 


C15 


E15 


Description 


Float (active low). This input forces all bidirectional and output signals to a 
3-state condition. Floating the signals allows the microprocessor signals to 
be driven externally without physically removing the device from the circuit. 
The microprocessor must be reset following assertion or negation of FLT#. 
This signal may be used with an upgrade socket. 


FLT# is internally connected to a pullup resistor to prevent it from floating 
active when left unconnected. 


Cache Flush (active low). This input invalidates (flushes) the entire cache. 
Use of FLUSH# to maintain cache coherency is optional. The cache may also 
be invalidated during each hold-acknowledge cycle by setting the BARB bit 
in the CCRO Configuration register. The FLUSH# input is ignored following 
reset and can be enabled using the FLUSH bit in the CCRO Configuration 
register. 


FLUSH # is internally connected to a pullup resistor to prevent it from floating 
active when left unconnected. 


Hold Request (active high). This input indicates that another bus master 
requests control of the local bus. The bus arbitration (HOLD and HLDA) 
signals allow the microprocessor to relinquish control of its local bus when 
requested by another bus master device. Once the processor has 
relinquished its 3-stated bus, the bus master device can then drive the local 
bus signals. 


After recognizing the HOLD request and completing the current bus cycle or 
sequence of locked bus cycles, the microprocessor responds by floating the 
local bus and asserting the hold acknowledge (HLDA) output. 


Once HLDA is asserted, the bus remains granted to the requesting bus 
master until HOLD becomes inactive. When the microprocessor recognizes 
that HOLD is inactive, it simultaneously drives the local bus and drives HLDA 
inactive. External pullup resistors may be required on some of the 
microprocessor 3-state outputs to ensure that they remain inactive while in 
a hold-acknowledge state (or float state for the 144-pin QFP and 168-pin 
CPUs). 


The HOLD input is not recognized while RESET is active. If HOLD is asserted 
while RESET is active, RESET has priority, and the microprocessor places 
the bus into an idle state instead of a hold-acknowledge state. The HOLD 
input is also recognized during suspend mode provided that the CLK2 input 
has not been stopped. HOLD is level-sensitive and must meet specified 
setup and hold times for correct operation. 
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Table 4-2. TI486SXL Terminal Functions (Continued) 


Name 
HLDA 


132- 
pin 
M14 


Terminal 
No. 
144- 
pin 

6 


168- 
pin 
P15 


Description 


Hold Acknowledge (active high). This output indicates that the 
microprocessor is in a hold-acknowledge state and has relinquished control 
of its local bus. While in the hold-acknowledge state, the microprocessor 
drives HLDA active and continues to drive SUSPA#, if enabled. The other 
microprocessor outputs are in the high-impedance state, allowing the 
requesting bus master to drive these signals. If the on-chip cache can satisfy 
bus requests, the microprocessor continues to operate during 
hold-acknowledge states. A20M# is internally recognized during this time. 


The microprocessor deactivates HLDA when the HOLD request is driven 
inactive. The microprocessor stores an NMI rising edge during a 
hold-acknowledge state for processing after HOLD is inactive. The FLUSH# 
input is also recognized during a hold-acknowledge state. If SUSP# is 
asserted during a hold-acknowledge state, the microprocessor may or may 
not enter suspend mode depending on the state of the internal execution 
pipeline. Table 4-6 summarizes the state of the microprocessor signals 
during hold acknowledge. 


INTR 


KEN# 
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B7 


B12 


53 


41 


A16 


F15 


Maskable Interrupt Request. This level-sensitive input causes the processor 
to suspend execution of the current instruction stream and begin execution 
of an interrupt service routine. The INTR input can be masked (ignored) 
through the Flag Word register IF bit. When unmasked, the microprocessor 
responds to the INTR input by issuing two locked interrupt-acknowledge 
cycles. To assure recognition of the INTR request, INTR must remain active 
until the start of the first interrupt-acknowledge cycle. 


Cache Enable (active low). This input indicates that the data being returned 
during the current cycle is cacheable. When KEN# is active and the 
microprocessor is performing a cacheable code fetch or memory data read 
cycle, the cycle is transformed into a cache fill. Use of the KEN# input to 
control cacheability is optional. The noncacheable region registers can also 
be used to control cacheability. Memory addresses specified by the 
noncacheable region registers cannot be cached regardless of the state of 
KEN#. I/O accesses, locked reads, SMM address space accesses, and 
interrupt-acknowledge cycles are never cached. 


During cached code fetches with BS16# asserted, two contiguous read 
cycles are performed to completely fill the 4-byte cache line. KEN# must be 
asserted during both read cycles to cause acacheline fill. If BS16#is inactive, 
only one bus cycle is required and KEN# must be asserted for the data to be 
cached. During memory data reads, the microprocessor performs as many 
read cycles as necessary to supply the required data to complete the current 
operation. Valid bits are maintained for each byte in the cache line and for 
each block of four lines, thus allowing data operands of less than four bytes 
to reside in the cache. 


If two read cycles are performed with the same address (A31—A2), KEN# 
must be asserted during both cycles to cache the data in these cycles. If the 
data is cached, the microprocessor ignores the state of the byte enables 
(BE3# — BEO#), and four bytes of data (2 bytes if BS16# is asserted) are 
cached. The KEN# input is ignored following reset and can be enabled using 
the KEN bit in the CCRO Configuration register. 


KEN# is internally connected to a pullup resistor to prevent it from floating 
active when left unconnected. 
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Table 4-2. TlI486SXL Terminal Functions (Continued) 


Terminal 
No. 
132- 144- 168- 
Name pin pin pin _ Description 


LOCK# C10 38 N15 LOCK (active low). This 3-state, bus-cycle-definition signal is asserted to 
deny access to the CPU bus by other bus masters. The LOCK# signal may 
be explicitly activated during bus operations by including the LOCK prefix 
on certain instructions. LOCK# is always asserted during descriptor and 
page table updates, interrupt-acknowledge sequences, and when 
executing the XCHG instruction. The microprocessor does not enter the 
hold-acknowledge state in response to HOLD while the LOCK# output is 
active. 


MEMW# — 66 Bi6 Memory Write (active low). This input is used in the cache interface logic, 
which flushes the cache in systems that hold the CPU during DMA and 
MASTER cycles. 


M/lO# Al12 34 N16 Memory/lO. This 3-state, bus-cycle-definition signal is low during I/O read 
and write cycles and is high during memory cycles. 


NA# D13 9 A13 Next Address Request (active low). This input requests address pipelining 
by the system hardware. When asserted, the system indicates that it is 
prepared to accept new bus-cycle definition and address signals (M/lO#, 
D/C#, W/R#, A31—A2, BS16#, and BE3#—BE0#) from the microprocessor 
even if the current bus cycle has not been terminated by assertion of 
READY#. If the microprocessor has an internal bus request pending and the 
NA# input is sampled active, the next bus-cycle definition and address 
signals are driven onto the bus. 


Nct B6 39 A3 Make no external connection. 
65 A5 
71 A14 
138 <A17 


Q15 
Q16 
Q17 
R16 


t Connecting or terminating (high or low) any NC terminal(s) may cause the microprocessor to produce unpredictable results or 
not operate. 
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Table 4-2. TI486SXL Terminal Functions (Continued) 


Name 
NMI 


PEREQ 


READY# 


Reserved 


132- 
pin 
B8 


C8 


G13 


Terminal 
No. 
144- 
pin 
51 


50 


10 


168- 
pin 
A15 


R17 


F16 


Description 


Nonmaskable Interrupt Request. This rising-edge-sensitive input causes 
the processor to suspend execution of the current instruction stream and 
begin execution of an NMI interrupt service routine. The NMI interrupt service 
request cannot be masked by software. Asserting NMI causes an interrupt 
that internally supplies interrupt vector 2h to the CPU core. External 
interrupt-acknowledge cycles are not necessary since the NMI interrupt 
vector is supplied internally. Once NMI processing has started, no additional 
NMls are processed until an IRET instruction is executed. 


The microprocessor samples NMI at the beginning of each phase two (2) 
clock period. To assure recognition, NMI must be inactive for at least eight 
CLK2 periods and then be active for at least eight CLK2 periods. Additionally, 
specified setup and hold times must be met to assure recognition at a 
particular clock edge. 


Coprocessor Request (active high). This input indicates that the 
coprocessor is ready to transfer data to or from the CPU. The coprocessor 
can assert PEREQ in the process of executing a coprocessor instruction. The 
microprocessor internally stores the current coprocessor opcode and 
transfers the correct data to support coprocessor operations. The 
microprocessor employs PEREQ to synchronize the transfer of required 
operands. 


PEREQ is internally connected to a pulldown resistor to prevent this signal 
from floating active when left unconnected. 


Ready (active low). This input is generated by the system hardware to 
indicate that the current bus cycle can be terminated. During a read cycle, 
assertion of READY# indicates that the system hardware has presented valid 
data to the CPU. When READY# is sampled active, the microprocessor 
latches the input data and terminates the cycle. During a write cycle, 
READY# assertion indicates that the system hardware has accepted the 
microprocessor output data. READY# must be asserted to terminate every 
bus cycle, including halt and shutdown indication cycles. 


RESET 


SMADS# 
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cg 


C6 


29 


C16 


B13 


Reset (active high). When asserted, RESET suspends all operations in 
progress and places the microprocessor into a reset state. RESET is a 
level-sensitive synchronous input and must meet specified setup and hold 
times to be properly recognized by the microprocessor. The microprocessor 
begins executing instructions at physical address location FF FFFOh 
approximately 400 CLK2 edges after RESET is driven inactive (low). 


While RESET is active, the microprocessor is initialized to nonclock-doubled 
mode (for the TlI486SXL2) and all other input pins are ignored. The remaining 
signals are initialized to their reset state during the internal processor reset 
sequence. The reset signal states for the microprocessor are shown in 
Table 4-6. 


SMM Address Strobe (active low). SMADS#, a 3-state output, is asserted 
instead of the ADS# during SMM bus cycles and indicates that SMM memory 
is being accessed. SMADS# floats while the CPU is in a hold-acknowledge 
or float state. The SMADS# output is disabled (floated) following reset and 
can be enabled using the SMI bit in the CCR1 Configuration register. 


Input/Output Signals 


Table 4-2. Tl486SXL Terminal Functions (Continued) 


Name 


SMIl# 


SUSP# 


SUSPA# 


Voc 


VCC5 


132- 
pin 


C7 


A4 


B4 


Al 
AS 
A7 
A10 
Ail4 
C5 
C12 
D1i2 
G2 
G3 
G12 
G14 
L12 
M3 
M7 
M13 
N4 
N7 
P2 
P8 


Terminal 
No. 
144- 
pin 


67 


63 


64 


103 
105 
119 
125 
132 
139 


47 


168- 
pin 


B10 


C13 


B12 


B7 
B9 
B11 
C4 
C5 
E2 
E16 
G2 
G16 
H16 
K2 
K16 
L16 
M2 
M16 
P16 
R3 
R6 
R8 
RQ 
R10 
Ri1 
R14 


J1 


Description 


System Management Interrupt (active low). This 3-state, bidirectional, 
level-sensitive, input/output signal is an interrupt with higher priority than the 
NMI interrupt. SMI# must be active for at least four CLK2 clock periods to 
be recognized by the microprocessor. After the SMI is acknowledged, the 
SMI# pin is driven low by the microprocessor for the duration of the SMI 
service routine. The SMI# input is ignored following reset and can be 
enabled using the SMI bit in the CCR1 Configuration register. 


SMI# is internally connected to a pullup resistor to prevent it from floating 
active when left unconnected. 


Suspend Request (active low). This input requests the microprocessor to 
enter suspend mode. After recognizing SUSP# as active, the processor 
completes execution of the current instruction, any pending decoded 
instructions, and associated bus cycles. In addition, the microprocessor 
waits for the coprocessor to indicate a not-busy status (BUSY# = 1) before 
entering suspend mode and asserting suspend acknowledgement 
(SUSPA#). 


SUSP# is internally connected to a pullup resistor to prevent it from floating 
active when left unconnected. 


Suspend Acknowledge (active low). This output indicates that the 
microprocessor has entered the suspend mode as a result of SUSP# 
assertion or execution of a HALT instruction. 


Power Supply. All pins must be connected and used. 


5-V Power Supply 
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Table 4-2. TI486SXL Terminal Functions (Continued) 


Terminal 
No. 
132- 144- 168- 
Name pin’ pin pin _ Description 
Vss A2 2 A7 Ground Pins. All pins must be connected and used. 
A6 8 AQ 
AQ 18 Al1 
B1 19 B3 
B5 20 B4 
B11 21 B5 
B14 22 E1 
C11 23 E17 
F2 24 G1 
F3 33 G17 
F14 48 H1 
J2 54 H17 
J3 57 K1 
J12 69 K17 
J13 70 L1 
M4 72 L17 
M8 80 M1 
M10 92 M17 
N3 96 P17 
P6 97 Q2 
P14 «111 R4 
S6 
S8 
sg 
$10 
$11 
$12 
$14 
W/R# B10 36 N17 Write/Read. This 3-state, bus-cycle-definition signal is low during read 
37 cycles (data is read from memory or I/O) and is high during write bus cycles 


(data is written to memory or I/O). 


4.1.2 Byte Enable Line Definitions 


These 3-state outputs determine which bytes within the 32-bit data bus are 
transferred during a memory or I/O access. See Table 4-3. 


Table 4—3. Byte Enable Line Definitions 
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Byte Enable Line 
BEO# 


BE1# 
BE2# 
BE3# 


Byte Transferred 
D7-—DO 

D15-—D8 
D23-D16 
D31-—D24 
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4.1.3 Write Duplication as a Function of BE3# — BEO# 


During a memory write, one or both of the upper bytes (D and C) of the data 
bus can be duplicated in the lower bytes (B and A) of the bus. This duplication 
is dependent on BE3#—BE0# as listed in Table 4—4. 


Table 4—4. Write Duplication as a Function of BE3#—BE0# 
BE3#-BE0# D31-D24 D23-D16 D15-D8 D7-DO Duplicated Data 


0000 D Cc B A No 
0001 D Cc B X No 
0011 D Cc D Cc Yes 
0111 D X D X Yes 
1000 X Cc B A No 
1001 X Cc B X No 
1011 X C X C Yes 
1100 X X B A No 
1101 X X B X No 
1110 X X X A No 


Note: BE3# -—BEO# combinations not listed do not occur during TlI486SXL bus cycles. 
A = logical write data D7 — DO 
B = logical write data D15 — D8 
C = logical write data D23 - D16 
D = logical write data D31 — D24 
X = Don’t care 


4.1.4 Generating A1 — AO Using BE3# — BEO# 


Generating A1—A0 using BE3#—BE0# is determined with the following equa- 
tions: 


AO = (BEO# ¢ BE2#) + (BEO# ¢ BE1#) 
Ai = BEO# e BE1# 
The relationship between A1—A0 and BE3#-—BEO0# is shown in Table 4—5. 


Table 4—5. Generating A1—A0O Using BE3#-BEO# 


A31-A2 Al AO BE3# BE2#  BE1#  BEO# 
— 0 0 Xx Xx Xx 0 
—_— 0 1 X x 0 1 
—_— 1 0 Xx 0 1 1 
—— 1 1 0 1 1 1 


Note: X=Don’tcare 


4.1.5 Signal States During Reset and Hold Acknowledge 


RESET is the highest priority input signal. When RESET is asserted, the mi- 
croprocessor aborts any current bus cycle and establishes real-mode 
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bus-cycle definition with active buses. See Table 3-3 and Section 4.3, Reset 


Timing and Internal Clock Synchronization, page 4-19. 


The microprocessor enters the hold-acknowledge state in response to asser- 
tion of the HOLD input. During the hold-acknowledge state, the microproces- 
sor floats all output and bidirectional signals, except for HLDA and SUSPA#. 
In the hold-acknowledge state, all inputs except HOLD, FLUSH#, FLT#, 
SUSP# and RESET are ignored. See Table 3-3 and subsection 4.4.9, Hold 
Acknowledge State, page 4-45. The hold-acknowledge state lets an external 


device acquire the system bus. 


Table 4-6. Tl486SXL Signal States During RESET and Hold Acknowledge 
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Signal Name 
A20M# 
A31-A2 
ADS# 
BE3#—BEO# 
BS16# 
BUSY# 
D31—Do 
D/C# 
ERROR# 
FLT# t 
FLUSH# 
HLDA 
HOLD 
INTR 
KEN# 
LOCK# 
MEMW# t 
M/lO# 
NA# 

NMI 
PEREQ 
READY# 
RESET 
SMADS# 
SMI# 
SUSP# 
SUSPA# 
W/R## 


Signal State 
During Reset 


Ignored 

1 

1 

0 

Ignored 

Initiates self test 
Float 

1 

Ignored 

Input recognized 
Ignored 

0 

Ignored 

Ignored 

Ignored 

1 

Ignored 

0 

Ignored 

Ignored 

Ignored 

Ignored 

Input recognized 
Float 

Ignored 

Ignored 

Float 

0 


t 144-pin QFP and 168-pin PGA only 


+ 144-pin QFP has W/R# on pins 36 and 37. These terminals must be connected together. 


Signal State During 
Hold Acknowledge 


Input recognized 
Float 

Float 

Float 

Ignored 

Ignored 

Float 

Float 

Ignored 

Input recognized 
Input recognized 
1 

Input recognized 
Input recognized 
Ignored 

Float 

Input recognized 
Float 

Ignored 

Input recognized 
Ignored 

Ignored 

Input recognized 
Float 

Input recognized 
Input recognized 
Driven 

Float 
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4.2 Bus-Cycle Definition 


The bus-cycle-definition signals consist of four 3-state outputs (M/IO#, D/C#, 
W/R#, and LOCK#) that define the type of bus-cycle operation. Table 4—7 de- 
fines the bus cycle for the possible states of these signals. M/IO#, D/C#, and 
W/R# are the primary bus-cycle-definition signals and are driven valid as 
ADS# (Address Strobe) becomes active. During nonpipelined cycles, the 
LOCK# output is driven valid along with M/IO#, D/C#, and W/R#. During pipe- 
lined addressing, LOCK# is driven at the beginning of the bus cycle, which is 
after ADS# becomes active for that cycle. The bus-cycle-definition signals are 
active low and float while the microprocessor is in a hold-acknowledge or float 
state. 


Table 4—7. Tl486SXL Bus-Cycle Types 


MiO# D/C# W/R# LOCK# Bus-Cycle Type 


0 0 0 0 Interrupt acknowledge 
0 0 0 1 — 

0 0 1 X — 

0 1 X 0 —_ 

0 1 0 1 I/O data read 

0 1 1 1 I/O data write 

1 0 X 0 — 

1 0 0 1 Memory code read 


Halt: A31—A2 = 0h and BE3#—BE0# = 1011 
Shutdown: A31—A2 = Oh and BE3#—BEO# = 1110 


1 1 0 0 Locked memory data read 
1 1 0 1 Memory data read 
1 1 1 0 Locked memory data write 
1 1 1 1 Memory data write 


X = don’t care 
— = does not occur 


4.2.1. Clock Doubling Using Software Control 


The clock-doubled feature of the TI486SXL2 is enabled/disabled using 
Configuration Control register 0 (CCRO) bit 6. The following software code sets 
and resets CKD: 


Set CKD programming sequence: 


mov al, OCOh ;select CCRO 
out 22h, al 

in al, 23h ;read CCRO 
mov ah, al ;save in AH 
or ah, 40h ;set AH<6> 
mov al, OCOh ;select CCRO 


out 22h, al 
mov al, ah 
out 23h, al ;write CCRO 
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Reset CKD programming sequence: 


mov al, OCOh ;select CCRO 
out 22h, al 

in al, 23h ;read CCRO 
mov ah, al ;save in AH 
and ah, OBFh ;reset AH<6> 
mov al, OCOh ;select CCRO 
out 22h, al 

mov al, ah 

out 23h, al ;write CCRO 


4.2.1.1 Entering Clock-Doubled Mode 


The TI486SXL2 microprocessors power up in the nonclock-doubled mode. To 
enter the clock-doubled mode, set CLK2 to the desired frequency inside the 
phase-locked loop (PLL) lock range (see Table 5—5 and Table 5-6) and issue 
the set-CKD-programming sequence. Approximately 20 us after the final OUT 
instruction has exited the processor pipeline, the PLL locks and the CPU 
enters clock-doubled mode. Until the PLL is locked, the processor continues 
to operate in the nonclock-doubled mode. 


4.2.1.2 Clock-Scaling Sequence 


To scale or stop CLK2 input when the processor is in clock-doubled mode, is- 
sue the reset-CKD-programming sequence. The final OUT instruction exiting 
the processor pipeline resets the CKD bit and puts the microprocessor into 
nonclock-doubled mode. This must occur before scaling or stopping the CLK2 
input to prevent a synchronization error. This may be ensured by issuing a 
JUMP instruction, such as UMP $+2, before scaling CLK2. 


To return the processor to clock-doubled mode, set CLK2 to the desired fre- 
quency inside the PLL lock range and issue the set-CKD-programming se- 
quence. Approximately 20 us after the final OUT instruction has exited the pro- 
cessor pipeline, the PLL locks and the processor enters clock-doubled mode. 


4.2.1.3 Suspend Mode 
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Suspend mode can be initiated when the TI486SXL2 microprocessor is in 
clock-doubled mode as long as the CLK2 input is not scaled or stopped. Sus- 
pend mode does not disable the PLL; instead, changing the CLK2 frequency 
causes the PLL to lose lock. 


For more detailed information on entering and exiting suspend in nonclock- 
doubled mode, refer to subsection 4.2.2, Power Management. 


To get the lowest possible power state, bring the microprocessor out of clock- 
doubled mode, enter the suspend mode (using software or hardware), and 
stop the CLK2 input. 
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4.2.2 Power Management 


The power-management signals allow the Tl486SXL series microprocessors 
to enter suspend mode. Suspend-mode circuitry allows the microprocessor to 
consume minimal power while maintaining the entire internal CPU state. 


4.2.2.1. Suspend Request (SUSP#) 


Suspend Request (SUSP¥) is an active-low input that requests the TI486SXL 
series microprocessors to enter suspend mode. For TI486SXL2 microproces- 
sors, follow the clock-scaling sequence procedure in subsection 4.2.1 to enter 
nonclock-doubled mode before scaling or stopping the CLK2 input. 


After recognizing SUSP# is active, the processor completes execution of the 
current instruction, any pending decoded instructions, and associated bus 
cycles. In addition, the microprocessor waits for the coprocessor to indicate 
anot-busy condition (BUSY#=1) before entering suspend mode and asserting 
suspend acknowledge (SUSPA#). During suspend mode, internal clocks are 
stopped and only the logic for monitoring RESET, HOLD, and FLUSH# re- 
mains active. With SUSPA# asserted, the CLK2 input to the microprocessor 
can be stopped in either phase. Stopping the CLK2 input further reduces cur- 
rent required by the microprocessor. 


To resume operation, restart the CLK2 input (if stopped) and negate the 
SUSP# input. The Tl486SXL2 processors can enter clock-doubled mode 
(subsection 4.2.1.1, Entering Clock-Doubled Mode) once the CLK2 input 
reaches the desired frequency within the PLL lock range. The processor then 
resumes instruction fetching and begins execution in the instruction stream at 
the point where it stopped. 


The SUSP# input is level sensitive and must meet specified setup and hold 
times to be recognized at a particular clock edge. The SUSP# input is ignored 
following reset and can be enabled using the SUSP bit in the CCRO Configura- 
tion register. 


4.2.2.2. Suspend Acknowledge (SUSPA#) 


The Suspend Acknowledge (SUSPA#) output indicates that the TI486SXL se- 
ries microprocessor has entered the suspend mode as a result of SUSP# 
assertion or execution of a HALT instruction. If SUSPA# is asserted and the 
CLk2 input is switching, the microprocessor continues to recognize RESET, 
HOLD, and FLUSH#. In addition, the Tl486SXL2 microprocessor may stay in 
clock-doubled mode while the CLK2 input is switching. If suspend mode was 
entered as the result of a HALT instruction, the microprocessor also continues 
to monitor the NMI input, the SMI# input, and the unmasked INTR input. Detec- 
tion of SMI#, INTR, or NMI forces the microprocessor to exit suspend mode 
and begin execution of the appropriate interrupt service routine. The CLK2 in- 
put to the processor can be stopped after SUSPA# has been asserted to re- 
duce the power requirement of the microprocessor further. For this case, the 
Tl486SXL2 microprocessor must be brought out of clock-doubled mode 
before stopping the CLK2 input to prevent a synchronization error. The SUS- 
PA# output is disabled (floated) following reset and can be enabled using the 
SUSP bit in the CCRO Configuration register. 
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Table 4-8 shows the state of the Tl486SXL series microprocessor signals 


when the device is in suspend mode. 


Table 4-8. Tl486SXL Signal States During Suspend Mode 


Signal Name 
A20M# 


A31-A2 
ADS# 
BE3#—BEO# 
BS16# 
BUSY# 
D31—DOo 
D/C# 
ERROR# 
FLT# t 
FLUSH# 
HLDA 
HOLD 
INTR 
KEN# 
LOCK# 
MEMW# Tt 
M/lO# 
NA# 

NMI 
PEREQ 
READY# 
RESET 
SMADS# 
SMI# 
SUSP# 
SUSPA# 
W/R# 


Signal State During 
Hold Acknowledge 


Ignored 

1 

1 

0 

Ignored 

Ignored 

Float 

1 

Ignored 

Input recognized 
Input recognized 
0 

Input recognized 
Latched 

Ignored 

1 

Input recognized 
0 

Ignored 

Latched 

Ignored 

Ignored 

Input recognized 
1 

Latched 

Input recognized 
0 

0 


T 144-pin QFP and 168-pin PGA only 
+ 144-pin QFP has duplicate W/R# inputs on pins 36 and 37 
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Signal State During Halt- 
Initiated Suspend Mode 


Ignored 

1 

1 

0 

Ignored 

Ignored 

Float 

1 

Ignored 

Input recognized 
Input recognized 
0 

Input recognized 
Input recognized 
Ignored 

1 

Input recognized 
0 

Ignored 

Input recognized 
Ignored 

Ignored 

Input recognized 
1 

Input recognized 
Ignored 

0 

0 


Reset Timing and Internal Clock Synchronization 


4.3 Reset Timing and Internal Clock Synchronization 


RESET is the highest priority input signal and interrupts any processor activity 
when itis asserted. When RESET is asserted, the microprocessor aborts any 
bus cycle. Idle, hold-acknowledge, and suspend states are also discontinued 
and the reset state is established. RESET is used when the microprocessor 
is powered up to initialize the CPU to a known valid state and to synchronize 
the internal CPU clock with external clocks. The TI486SXL2 microprocessors 
are initialized to nonclock-doubled mode when RESET goes active. 


RESET must be asserted for at least 15 CLK2 periods to ensure recognition 
by the microprocessor. If the self-test feature is to be invoked, RESET must 
be asserted for at least 80 CLK2 periods. RESET pulses of less than 15 CLK2 
periods may not have sufficient time to propagate throughout the microproces- 
sor and may not be recognized. RESET pulses of less than 80 CLK2 periods 
followed by a self-test request may incorrectly report a self-test failure when 
none has occurred. 


If the RESET falling edge meets specified setup and hold times, the internal 
processor clock phase is synchronized as illustrated in Figure 4—2. The 
TI486SXL internal processor clock is half the frequency of the CLK2 input and 
each CLk2 cycle corresponds to an internal CPU clock phase (0). Phase two 
(2) of the internal clock is defined as the second rising edge of CLK2 following 
the falling edge of RESET. The Tl486SXL2 internal core clock is the same fre- 
quency as the CLK2 input, and the internal bus interface clock is half the fre- 
quency of the CLK2 input. Phase two of the internal clock is defined as the se- 
cond rising edge of CLK2 following the falling edge of RESET. 


Figure 4-2. TI486SXL Internal Processor Clock Synchronization 
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Following the falling edge of RESET (and after self-test if it was requested), 
the microprocessor performs an internal initialization sequence for approxi- 
mately 400 CLK2 periods. The microprocessor self-test feature is invoked if 
the BUSY# input is in the active (low) state when RESET falls inactive. The 
self-test sequence requires approximately (220 + 60) CLK2 periods to com- 
plete. Even if the self-test indicates a problem, the microprocessor attempts 
to proceed with the reset sequence. Figure 4—3 illustrates the bus activity and 
timing during the microprocessor reset sequence. 


Figure 4-3. TlI486SXL Bus Activity From RESET Until First Code Fetch 
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Note: BUSY#shouldbe held stable for 80 CLK2 periods before and after the CLK2 period in which RESET falling edge occurs. 


Upon completion of self-test, the EAX register contains 0000 0000h if the 
microprocessor passed its internal self-test with no problems. Any nonzero 
value in the EAX register indicates that the microprocessor is faulty. 
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4.4 Bus Operation and Functional Timing 


The TI486SXL series microprocessor communicates with the external system 
through separate, parallel buses for data and address. This is commonly 
called a demultiplexed address/data bus. This demultiplexed bus eliminates 
the need for address latches required in multiplexed address/data bus config- 
urations, where the address and data are presented on the same pins at differ- 
ent times. 


TI486SXL series microprocessor instructions can act on memory data oper- 
ands consisting of 8-bit bytes, 16-bit words, or 32-bit double words. The micro- 
processor bus architecture allows for bus transfers of these operands without 
restrictions on physical address alignment. Any byte boundary may require 
more than one bus cycle to transfer the operand. This feature is transparent 
to the programmer. 


The microprocessor data bus (D31—D0) is a bidirectional bus that can be con- 
figured as either a 16-bit- or 32-bit-wide bus as determined by BS16#. The bus 
is 16 bits wide when BS16# is asserted. When 32 bits wide, memory and I/O 
spaces are physically addressed as arrays of 32-bit double words. The micro- 
processor drives the data bus during write bus cycles. The external system 
hardware drives the data bus during read bus cycles. 


Every bus cycle begins with assertion of the address strobe (ADS#). ADS# in- 
dicates that the microprocessor has issued a new address and new bus-cycle- 
definition signals. A bus cycle is defined by four signals: M/lIO#, W/R#, D/C#, 
and LOCK#. M/IO# defines whether a memory or I/O operation is occurring, 
W/R# defines the cycle as read or write, and D/C# indicates whether a data 
or control cycle is in effect. LOCK# indicates that the current cycle is a locked 
bus cycle. Every bus cycle completes when the system hardware returns 
READY# asserted. 


The TI486SXL series microprocessor performs the following bus-cycle types: 


Memory read 

Locked memory read 

Memory write 

Locked memory write 

I/O read (or coprocessor read) 

I/O write (or coprocessor write) 
Interrupt acknowledge (always locked) 
Halt/shutdown 


OUUOUOUUULU 


When the microprocessor has no pending bus requests, the bus enters the idle 
state. There is no encoding of the idle state on the bus-cycle-definition signals; 
however, the idle state can be identified by the absence of further assertions 
of ADS# following a completed bus cycle. 


Note that all bus diagrams apply to all TI486SXL series microprocessors. The 


TI486SXL2 clock-doubled feature does not change the external microproces- 
sor bus interface. 
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4.4.1. Bus Cycles Using Nonpipelined Addressing 


The shortest time unit of bus activity is a bus state, commonly called aT state. 
A bus state is one internal processor clock period in duration (two CLK2 peri- 
ods in nonclock-doubled mode and one CLK2 period in clock-doubled mode). 
Acomplete data transfer occurs during a bus cycle, composed of two or more 
bus states. 


4.4.1.1 Nonpipelined Bus States 


The first state of a nonpipelined bus cycle is called T1. During phase one (first 
CLK2) of T1, the address bus and bus-cycle-definition signals are driven valid 
and, to signal their availability, address strobe (ADS#) is simultaneously as- 
serted. 


The second bus state of a nonpipelined cycle is called T2. T2 terminates a bus 
cycle with the assertion of the READY# input, and valid data is either read or 
written depending on the bus-cycle type. The fastest microprocessor bus cycle 
requires only these two bus states. READY# is ignored at the end of the T1 
state. 


Three consecutive bus read cycles, each consisting of two bus states, are 
shown in Figure 4—4. 


Figure 4—4. TlI486SXL Fastest Nonpipelined Read Cycles 
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Note: Fastest nonpipelined bus cycles consist of T1 and T2. 
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4.4.1.2 Nonpipelined Read and Write Cycles 


Any bus cycle can be performed with nonpipelined address timing. Figure 4—5 
shows a mixture of read and write cycles with nonpipelined address timing. 
When a read cycle is performed, the microprocessor floats its data bus, and 
the externally addressed device then drives the data. The microprocessor re- 
quires that all data-bus pins be driven to a valid logic state (high or low) at the 
end of each read cycle, when READY# is asserted. When a read cycle is ac- 
knowledged by READY# asserted in the T2 bus state, the microprocessor 
latches the information present at its data-bus pins and terminates the cycle. 


When awrite cycle is performed, the data bus is driven by the microprocessor 
beginning in phase two of T1. When a write cycle is acknowledged, the write 
data remains valid throughout phase one of the next bus state to provide write- 
data hold time. 


Figure 4—5. Tl486SXL Various Nonpipelined Bus Cycles (No Wait States) 
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Note: Idle states are introduced arbitrarily. 
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4.4.1.3 Nonpipelined Wait States 


Once a bus cycle begins, it continues until acknowledged by the external sys- 
tem hardware using the READY# input. Acknowledging the bus cycle at the 
end of the first T2 results in the shortest possible bus cycle, requiring only T1 
and T2. However, if READY# is not immediately asserted, T2 states are re- 
peated indefinitely until the READY# input is sampled active. These intermedi- 
ate T2 states are referred to as wait states. If the external system hardware 
is not able to receive or deliver datain two bus states, READY# is withheld and 
adds at least one wait state to the bus cycle. Thus, on an address-by-address 
basis, the system is able to define how fast a bus cycle completes. 


Figure 4—6 illustrates nonpipelined bus cycles with one wait state added to 
cycles 2 and 3. READY# is sampled inactive at the end of the first T2 state in 
cycles 2 and 3. Therefore, the T2 state is repeated until READY# is sampled 
active at the end of the second T2, and the cycle is then terminated. The micro- 
processor ignores the READY# input at the end of the T1 state. 


Figure 4—6. TI486SXL Various Nonpipelined Bus Cycles With Different Numbers of Wait 
States 
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4.4.1.4 Initiating and Maintaining Nonpipelined Cycles 


The bus states and transitions for nonpipelined addressing are illustrated in 
Figure 4—7. The bus can switch between four possible states: T1, T2, Ti, and 
Th. Active bus cycles consist of T1 and T2 states, with T2 repeated for wait 
states. Bus cycles always begin with a single T1 state. T1 is always followed 
by a T2 state. If a bus cycle is not acknowledged during a given T2 and NA# 
is inactive, T2 repeats, resulting ina wait state. When acycle is acknowledged 
during T2, the following state is T1 of the next bus cycle when a bus request 
is pending internally. If no internal bus request is pending, the Ti state is en- 
tered. If the HOLD input is asserted and the microprocessor is ready to enter 
the hold-acknowledge state, the Th state is entered. 


Figure 4—7. Tl486SXL Nonpipelined Bus States 
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T1 — First clock of a nonpipelined bus cycle (CPU drives new address and asserts ADS#) 

T2 — Subsequent clocks of a bus cycle when NA# has not been sampled asserted in the current bus cycle 
Ti - Idle state 

Th — Hold acknowledge (CPU asserts HLDA) 


The fastest bus cycle consists of two states: T1 and T2. 
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Due to the demultiplexed bus, address pipelining gives the external hardware 
an additional T state of access time without inserting a wait state. The proces- 
sor always uses nonpipelined address timing after the reset sequence and fol- 
lowing any idle bus state. Pipelined or nonpipelined address timing is then de- 
termined on acycle-by-cycle basis using the NA# input. When address pipelin- 
ing is not used, the address and bus-cycle definition remain valid during all wait 
states. When wait states are added and nonpipelined address timing is neces- 
sary, NA# should be negated during each T2 state of the bus cycle except the 
last one. 


4.4.2 Bus Cycles Using Pipelined Addressing 


Address pipelining lets the system request the address and bus-cycle defini- 
tion of the next internally pending bus cycle before the current bus cycle is ac- 
knowledged with READY# asserted. If address pipelining is used, the external 
system hardware has an extra T state of access time to transfer data. Address 
pipelining is controlled cycle-by-cycle by the state of the NA# input. 


4.4.2.1 Pipelined Bus States 
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Pipelined addressing is always initiated by asserting NA# during a nonpipe- 
lined bus cycle. Within the nonpipelined bus cycle, NA# is sampled at the be- 
ginning of phase two of each T2 state and is only acknowledged by the micro- 
processor during wait states. When address pipelining is acknowledged, the 
address (BE3#—-BE0#, and A31—A2) and bus-cycle definition (W/R#, D/C#, 
and M/lO#) of the next bus cycle are driven before the end of the nonpipelined 
cycle. The address status output (ADS#) is asserted simultaneously to indi- 
cate validity of these signals. Once in effect, address pipelining is maintained 
in successive bus cycles by continuing to assert NA# during the pipelined bus 
cycles. 


As in nonpipelined bus cycles, the fastest bus cycles using a pipelined address 
require only two bus states. Figure 4—8 illustrates the fastest read cycles using 
pipelined address timing. The two bus states for pipelined addressing are T1P 
and T2P or T1P and T2I. The T1P state is entered following completion of the 
bus cycle in which the pipelined address and bus-cycle-definition information 
was made available, and it is the first bus state of every pipelined bus cycle. 
In other words, the T1P state follows a T2 state if the previous cycle was nonpi- 
pelined, and follows a T2P state if the previous cycle was pipelined. 


Figure 4—8. Tl486SXL Fastest Pipelined Read Cycles 
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Fastest pipelined bus cycles consist of T1P and T2P. 


Within the pipelined bus cycle, NA# is sampled at the beginning of phase two 
(2) of the T1P state. If the microprocessor has an internally pending bus re- 
quest and NA# is asserted, the T1P state is followed by a T2P state and the 
address and bus-cycle definition for the next pending bus request is made 
available. If no pending bus request exists, the T1P state is followed by a T2l 
state regardless of the state of NA# and no new address or bus-cycle informa- 
tion is driven. 


The pipelined bus cycle is terminated in either the T2P or T2I states with the 
assertion of the READY# input, and valid data is either input or output depend- 
ing on the bus-cycle type. READY# is ignored at the end of the T1P state. 


4.4.2.2 Pipelined Read and Write Cycles 


Any bus cycle can be performed with pipelined address timing. When a read 
cycle is performed, the microprocessor floats its data bus and the externally 
addressed device drives the data. When a read cycle is acknowledged by 
READY# asserted in either the T2P or T2I bus state, the microprocessor 
latches the information present at its data pins and terminates the cycle. 
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When awrite cycle is performed, the data bus is driven by the microprocessor 
beginning in phase two ($2) of T1P. When a write cycle is acknowledged, the 
write data remains valid throughout phase one (#1) of the next bus state to pro- 
vide write-data hold time. 


4.4.2.3 Pipelined Wait States 
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Once a pipelined bus cycle begins, it continues until acknowledged by the ex- 
ternal system hardware using the microprocessor READY# input. Acknowl- 
edging the bus cycle at the end of the first T2P or T2I state results in the short- 
est possible pipelined bus cycle. If READY# is not immediately asserted, how- 
ever, T2P or T2l states are repeated indefinitely until the READY# input is 
sampled active. Additional T2P or T2I states are referred to as wait states. 


Figure 4—9 illustrates pipelined bus cycles with one wait state added to cycles 
1 through 3. Cycle 1 is a pipelined cycle with NA# asserted during T1P anda 
pending bus request. READY# is sampled inactive at the end of the first T2P 
state in cycle 1. Therefore, the T2P state is repeated until READY# is sampled 
active at the end of the second T2P, and the cycle is then terminated. The mi- 
croprocessor ignores the READY# input at the end of the T1P state. ADS#, 
the address, and the bus-cycle-definition signals for the pending bus cycle are 
all valid during each of the T2P states. Also, asserting NA more than once dur- 
ing the cycle has no additional effect. Pipelined addressing can only output in- 
formation for the next bus cycle. 


Cycle 2 in Figure 4—9 illustrates a pipelined cycle, with one wait state, where 
NA# is not asserted until the second bus state in the cycle. In this case, the 
CPU enters the T2 state following T1P because NA# is not asserted. During 
the T2 state the microprocessor samples NA# asserted. Because a bus re- 
quest is pending internally and READY# is not active, the CPU enters the T2P 
state and asserts ADS#, a valid address, and bus-cycle-definition information 
for the pending bus cycle. The cycle is then terminated by an active READY# 
at the end of the T2P state. 


Cycle 3 of Figure 4—9 illustrates the case where no internal bus request exists 
until the last state of a pipelined cycle with wait states. In cycle 3, NA# is as- 
serted in T1P, requesting the next address. Because the CPU does not have 
an internal bus request pending, the T2I state is entered. However, by the end 
of the T2I state, a bus request exists. Because READY# is not asserted, a wait 
state is added. The CPU then enters the T2P state and asserts ADS#, a valid 
address, and bus-cycle-definition information for the pending bus cycle. As 
long as the CPU enters the T2P state at some point during the bus cycle, pipe- 
lined addressing is maintained. NA# needs to be asserted only once during the 
bus cycle to request pipelined addressing. 


Bus Operation and Functional Timing 


Figure 4—9. Tl486SXL Various Pipelined Cycles (One Wait State) 
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4.4.2.4 Initiating and Maintaining Pipelined Cycles 


Pipelined addressing is always initiated by asserting NA# during a nonpipe- 
lined bus cycle with at least one wait state. The first bus cycle following reset, 
an idle bus, or a hold-acknowledge state is always nonpipelined. Therefore, 
the microprocessor always issues at least one nonpipelined bus cycle follow- 
ing reset, idle, or hold acknowledge before pipelined addressing takes effect. 


Once a bus cycle is in progress and the current address has been valid for one 
entire bus state, the NA# input is sampled at the end of every phase one until 
the bus cycle is acknowledged. Once NA# is sampled active, the microproces- 
sor is free to drive a new address and bus-cycle definition on the bus as early 
as the next bus state and as late as the last bus state in the cycle. 


Figure 4—10 illustrates the fastest transition possible to pipelined addressing 
following an idle bus state. In cycle 1, NA# is driven during state T2. Thus, 
cycle 1 makes the transition to pipelined address timing, since it begins with 
T1 but ends with T2P. Because the address for cycle 2 is available before cycle 
2 begins, cycle 2 is called a pipelined bus cycle, and it begins with a T1P state. 
cycle 2 begins as soon as READY# assertion terminates cycle 1. 


Figure 4-10. TI486SXL Fastest Transition to Pipelined Address Following Bus-ldle State 
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Note: Following any idle bus state (Ti), the address is always nonpipelined and NA# is sampled only during wait states. To start 
address pipelining after an idle state, a nonpipelined cycle with at least one wait state (cycle 1 above) is required. The 
pipelined cycles (2, 3, and 4 above) are shown with various numbers of wait states. 
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Figure 4—11 illustrates the transition to pipelined addressing during a burst of 
bus cycles. Cycle 2 makes the transition to pipelined addressing. Comparing 
cycle 2 to cycle 1 of Figure 4-10 (on page 4-30) illustrates that a transition 
cycle is the same when it occurs and consists of at least T1, T2 (NA# is as- 
serted at that time), and T2P (provided the microprocessor has an internal bus 
request already pending). T2P states are repeated if wait states are added to 
the cycle. Cycles 2, 3, and 4 in Figure 4—11 show that once address pipelining 
is achieved, it can be maintained with two-state bus cycles consisting only of 
T1P and T2P. 


Once a pipelined bus cycle is in progress, pipelined timing is maintained for 
the next cycle by asserting NA# and detecting that the microprocessor enters 
T2P during the current bus cycle. The current bus cycle must end in state T2P 
for pipelining to be maintained in the next cycle. T2P is identified by the asser- 
tion of ADS#. Figure 4-10 and Figure 4—11 each show pipelining ending after 
cycle 4. This occurs because the microprocessor does not have an internal 
bus request prior to the acknowledgment of cycle 4. 


Figure 4-11. Tl486SXL Transition to Pipelined Address During Burst of Bus Cycles 
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Following any idle bus state (Ti), addresses are nonpipelined bus cycles, and NA# is sampled only during wait states. 
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Therefore, to begin address pipelining during a group of nonpipelined bus cycles requires a nonpipelined cycle with at 


least one wait state (cycle 2 above). 
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The complete bus-state-transition diagram, including operation with pipelined 
address, is given in Figure 4—12. This is a superset of the diagram for nonpipe- 
lined address. The three additional bus states for pipelined address are 


shaded. 


Figure 4-12. Tl486SXL Complete Bus States 
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Bus States: 
T1  — First clock of a nonpipelined bus cycle (CPU drives new address and asserts ADS#) 


T2 — Subsequent clocks of a bus cycle when NA# has not been sampled asserted in the current bus cycle 
T2| — Subsequentclocks ofa bus cycle when NA# has been sampled asserted in the current bus cycle but there 
is not yet an internal bus request pending (CPU does not drive a new address or assert ADS#) 

T2P — Subsequent clocks of a bus cycle when NA# has been sampled asserted in the current bus cycle and 

there is an internal bus request pending (CPU drives new address and asserts ADS#) 
T1P — First clock of a pipelined bus cycle 
Ti -— Idle state 
Th — Hold acknowledge state (CPU asserts HLDA) 
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4.4.3. Bus Cycles Using BS16# 


Assertion of BS16# during a bus cycle effectively changes the TlI486SXL mi- 
croprocessor 32-bit bus into a 16-bit data bus. Although slower, the 16-bit data 
bus usually requires less hardware interface circuitry and generally offers 
greater compatibility with 16-bit devices. 


4.4.3.1 Nonpipelined Cycles 


With BS16# asserted, all operand transfers physically occur on data bus lines 
D15—D0. With BS16# asserted during a 32-bit nonpipelined read or write, 
additional bus cycles are issued by the CPU to transfer the data. 


For data reads with only the two upper bytes selected (BE3#/BE2# asserted), 
data is read from D15—D0. 


For data writes with only the two upper bytes selected (BES#/BE2# asserted), 
data is duplicated on D15—D0 and no further action is required. 


For data reads with all four bytes selected (at least BE1# and BE2# asserted 
and possibly BEO#/BE3# also asserted), the CPU performs two 16-bit read 
cycles using data lines D15—DO. Lines D31—D16 are ignored. 


Data writes with all four bytes selected (at least BE1# and BE2# asserted and 
possibly BEO#/BE3# also asserted), the CPU performs two 16-bit write cycles 
using data lines D15—D0. Bytes 0 and 1 (corresponding to BEO# and BE1#) 
are sent on the first bus cycle (part one) and bytes 2 and 3 (corresponding to 
BE2# and BE3#) are sent on the second bus cycle (part two). BEO# and BE1# 
are always negated during the second 16-bit bus cycle. Figure 4—19 illustrates 
two nonpipelined bus cycles using BS16#. 
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Figure 4—13. Nonpipelined Bus Cycles Using BS16# 
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4.4.3.2 Pipelined Cycles 


The input signal NA# is a request to the CPU to drive the address, the byte en- 
ables, and the bus status signals for the next bus cycle as soon as they be- 
come internally available. Pipelining this address allows the system logic to an- 
ticipate the next bus-cycle operation. 


The CPU cannot acknowledge both address pipelining and BS16# for the 
same bus cycle. If NA# is already sampled when BS16# is asserted, the data 
bus remains 32 bits wide. If NA# and BS16# are asserted in the same window, 
NA# is ignored and BS16# remains effective (the data bus becomes 16 bits 
wide). Figure 4—14 illustrates the interaction between NA# and BS16#. 
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Figure 4-14. Pipelining and BS16# 
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Cycle 1A is pipelined. Cycle 1B cannot be pipelined, but its address can be inferred from cycle 1 to simulate address 
pipelining externally. 
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4.4.4 Locked Bus Cycles 


4.4.5 
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When the LOCK# signal is asserted, the Tl486SXL series microprocessors do 
not allow other bus master devices to gain control of the system bus. LOCK# 
is driven active in response to executing certain instructions with the LOCK 
prefix. The LOCK prefix allows indivisible read/modify/write operations on 
memory operands. LOCK#is also active during interrupt-acknowledge cycles. 


LOCK# is activated on the CLK2 edge that begins the first locked bus cycle 
and is deactivated when READY# is returned at the end of the last locked bus 
cycle. When the microprocessor is using nonpipelined addressing, LOCK# is 
asserted during phase one ($1) of T1. When it is using pipelined addressing, 
LOCKz# is driven valid during phase one of T1P. 


Figure 4—4, Figure 4—5, Figure 4—6, and Figure 4—13 on pages 4-22, 4-23, 
4-24, and 4-34 illustrate LOCK# timing during nonpipelined cycles. 
Figure 4—8, Figure 4—9, Figure 4—10, Figure 4—11, and Figure 4-14 on pages 
4-27, 4-29, 4-30, 4-31 and 4-35 cover the pipelined-address case. 


Interrupt-Acknowledge Cycles 


The T1486SXL microprocessors are interrupted by an external source via an 
input request on the INTR input (when interrupts are enabled). The micropro- 
cessor responds with two locked interrupt-acknowledge cycles. These bus 
cycles are similar to read cycles. Each cycle is terminated by READY# 
sampled active as shown in Figure 4-15. 
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Figure 4-15. TIl486SXL Interrupt-Acknowledge Cycles 
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Note: = Interruptvector (0-255) is read on D7—D0 at the end of the second interrupt-acknowledge bus cycle. Because each inter- 
rupt-acknowledge bus cycle is followed by idle bus states, asserting NA# has no practical effect. 


The state of the A2 pin distinguishes the first and second interrupt-acknowl- 
edge cycles. The address driven during the first interrupt-acknowledge cycle 
is 4h (A381—-A3 = 0, A2=1, BE3#-BE1#= 1, and BEO# = 0). The address 
driven during the second interrupt-acknowledge cycle is Oh (A31—A2 = 0, 
BE3#-BE1# = 1, and BEO# = 0). 


To assure that the interrupt-acknowledge cycles are executed indivisibly, the 
LOCK# output is asserted from the beginning of the first interrupt-acknowl- 
edge cycle until the end of the second interrupt-acknowledge cycle. In clock- 
doubled mode, four idle bus states (Ti) are inserted by the microprocessor 
between the two interrupt-acknowledge cycles. In nonclock-doubled mode, 
eight idle bus states are inserted. 


The interrupt vector is read at the end of the second interrupt cycle. The 
microprocessor reads the vector from D7—D0O of the data bus. The vector 
indicates the specific interrupt number (from O-255) requiring service. 
Throughout the balance of the two interrupt cycles, D31—D0 float. At the end 
of the first interrupt-acknowledge cycle, any data presented to the micropro- 
cessor is ignored. 
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4.4.6 Halt and Shutdown Cycles 


Executing the HLT instruction or detecting a severe error causes the micropro- 
cessor to halt operation or shutdown further processing. The microprocessor 
signals a halt or shutdown through a halt- or shutdown-indication cycle, 
respectively. 


4.4.6.1 Halt Indication Cycle 
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Executing the HLT instruction causes the microprocessor execution unit to 
cease operation. The microprocessor signals its entrance into the halt state 
by performing a halt indication cycle. The halt indication cycle is identified by 
the state of the bus-cycle-definition signals (M/IO# = 1, D/C# = 0, W/R# = 1, 
and LOCK# = 1) and an address of 2h (A31—A2 = 0, BE3#= 1, BE2# = 0, 
and BE1#-—BE0# = 1). 


The halt indication cycle must be acknowledged by asserting READY#. A 
halted microprocessor resumes execution when INTR (if interrupts are en- 
abled), NMI, SMI#, or RESET is asserted. Figure 4—16 illustrates a nonpipe- 
lined halt cycle. 
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Figure 4-16. Tl486SXL Nonpipelined Halt Cycle 
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4.4.6.2 Shutdown Indication Cycle 


Shutdown occurs when the microprocessor detects a severe error that pre- 
vents further processing. The TI486SXL series microprocessor shuts down as 
a result of a protection fault while attempting to process a double fault as well 
as the conditions referenced in Chapter 2, Programming Interface. A shut- 
down indication cycle is performed, which signals the microprocessor’s en- 
trance into the shutdown state. The shutdown indication cycle is identified by 
the state of the bus-cycle-definition signals (M/IO# = 1, D/C# = 0, W/R# = 1, 
and LOCK# = 1) and an address of Oh (A31—A2 = 0, BE8#—BE1# = 1, and 
BEO# = 0). The shutdown indication cycle must be acknowledged by asserting 
READY#. A shutdown microprocessor resumes execution when NMI or RE- 
SET is asserted. Figure 4—17 illustrates a shutdown cycle using pipelined ad- 
dressing. 


Figure 4-17. TI486SXL Pipelined Shutdown Cycle 
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Internal Cache Interface 


The TI486SXL cache is an 8K-byte write-through unified instruction/data 
cache with lines that are allocated only during memory read cycles. The cache 
is configured as two-way set associative. The cache organization consists of 
1024 sets, each containing two lines of four bytes each. 


Any unlocked memory read cycle can be cached by the TI486SXL series mi- 
croprocessor. The microprocessor does not automatically cache accesses to 
memory addresses specified by the Noncacheable-Region registers. Addi- 
tionally, the KEN# input can be used to enable caching of memory accesses 
on acycle-by-cycle basis. The microprocessor acknowledges the KEN# input 
only if the KEN enable bit is set in the CCRO Configuration register. 


As shown in Figure 4—18, the microprocessor samples the KEN# input one 
CLK2 period before READY# is sampled active. If KEN# is asserted and the 
current address is cacheable, the microprocessor fills two bytes of a line in the 
cache with the data present on the data bus pins. 


Figure 4-18. Nonpipelined Cache Fills Using KEN# 
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As shown in Figure 4—19 and Figure 4—20 on page 4-43, the microprocessor 
samples the KEN# input one CLK2 period before READY# is sampled active. 
If KEN# is asserted and the current address is set as cacheable, the micropro- 
cessor fills two bytes of a line in the cache with the data present on the data 
bus pins. The states of BE3#-BEO# are ignored if KEN# is asserted for the 


cycle. 


Figure 4-19. Nonpipelined Cache Fills Using KEN# and BS16# 
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Figure 4-20. Pipelined Cache Fills Using KEN# 
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4.4.7.2 Flushing the Cache 


To maintain cache coherency with external memory, the TlI486SXL series mi- 
croprocessors cache contents should be invalidated when previously cached 
data is modified in external memory by another bus master. The microproces- 
sor invalidates the internal cache contents during execution of the INVD and 
WBINVD instructions following assertion of: 


1 HLDA if the BARB bit is set in the CCRO Configuration register 
L) FLUSH# if the FLUSH bit is set in CCRO 


The microprocessor samples the FLUSH# input on the rising edge of CLK2 
corresponding to the beginning of phase two (#2) of the internal processor 
clock. If FLUSH# is asserted, the microprocessor invalidates the entire con- 
tents of the internal cache. The actual point in time when the cache is invali- 
dated depends upon the internal state of the execution pipeline. FLUSH# must 
be asserted for at least two CLK2 periods and must meet specified setup and 
hold times to be recognized on a specific CLK2 edge. 
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4.4.8 Address Bit-20 Masking 


The TI486SXL series microprocessor can be forced to provide 8086 1M-byte 
address wraparound compatibility by setting the A20M bit in the CCRO Config- 
uration register and asserting the A20M# input. When the A20M# is asserted, 
the 20th bit in the address to both the internal cache and the external bus pin 
is masked (zeroed). 


As shown in Figure 4—21, the microprocessor samples the A20M# input on the 
rising edge of CLK2 corresponding to the beginning of phase 2 (#2) of the in- 
ternal processor clock. If AZOM# is asserted and paging is not enabled, the mi- 
croprocessor masks the A20 signal internally starting with the next cache ac- 
cess and externally starting with the next bus cycle. If paging is enabled, the 
A20 signal is not masked regardless of the state of AZOM#. The A20 signal re- 
mains masked until the access following detection of an inactive state on the 
A20M# pin. A20M# must be asserted for a minimum of two CLK2 periods and 
must meet specified setup and hold times to be recognized on a specific CLK2 
edge. 


Figure 4-21. Tl486SXL Masking A20 Using A20M# During Burst of Bus Cycles 
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An alternative to using the A20M# pin is to set the NCO bitin the CCRO Configu- 
ration register. When the NCO bit is set, the microprocessor does not automati- 
cally cache accesses to the first 64K bytes and to 1M byte + 64K bytes. This 
prevents data within the wraparound memory area from residing in the internal 
cache and eliminates the need for masking address A20 to the internal cache. 


4.4.9 Hold Acknowledge State 


The hold-acknowledge state lets an external device in a TI486SXL micropro- 
cessor system acquire the system bus while the microprocessor is held in an 
inactive bus state. This allows external bus masters to take control of the 
microprocessor bus and directly access system hardware in a shared manner. 
The microprocessor continues to execute instructions out of the internal cache 
(if enabled) until a system bus cycle is required. 


The hold-acknowledge state (Th) is entered in response to assertion of the 
HOLD input. In the hold-acknowledge state, the microprocessor floats all out- 
put and bidirectional signals, except for HLDA and SUSPA#. HLDA is asserted 
as long as the microprocessor remains in the hold-acknowledge state. All in- 
puts except HOLD, FLUSH#, SUSP# and RESET are ignored. 


State Th can be entered directly from a bus-idle state, as in Figure 4—22, or 
after the completion of the current physical bus cycle if the LOCK signal is not 
asserted, as in Figure 4-23 and Figure 4-24. The CPU samples the HOLD in- 
put on the rising edge of CLK2 corresponding to the beginning of phase one 
(1) of the internal processor clock. HOLD is a synchronous input and can be 
asserted at any CLK2 edge, provided setup and hold requirements are met in 
every bus state. 


The hold-acknowledge state is exited in response to the HOLD input being ne- 
gated. The next bus start is an idle state (Ti) if no bus request is pending, as 
in Figure 4—22. lf an internal bus request is pending, as in Figure 4—23 and 
Figure 4—24, the next bus state is T1. Th is also exited in response to RESET 
being asserted. If HOLD remains asserted when RESET goes inactive, the 
microprocessor enters the hold-acknowledge state before performing any bus 
cycles provided HOLD is still asserted when the CPU is ready to perform its 
first bus cycle. 


If a rising edge occurs on the edge-triggered NMI input while in Th state, the 
event is remembered as a nonmaskable interrupt 2 and is serviced when the 
state is exited. 
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Figure 4-22. Tl486SXL Requesting Hold From Bus-ldle State 
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Notes: 1) HOLD is asynchronous input and can be asserted at any CLK2 edge, provided setup and hold requirements are 
met in every bus state. Violating setup or hold requirements results in incorrect operation. 


2) For maximum design flexibility, the CPU has no internal pullup resistors on its outputs. External pullups may be re- 
quired on ADS# and other outputs to keep them negated during the hold-acknowledge period. 
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Figure 4-23. Tl486SXL Requesting Hold From Active Nonpipelined Bus 


HOLD 
(See Note) 


HLDA / \ 


A31-A2, 
BE3#—BE0#, 
D/C#, M/IO#, W/R# 


ADS# 


BS16# 


READY# 


LOCK# 


Note: 


Bus Operation and Functional Timing 


xX 
ON 


PAW AN 


XXXXXXYY 
RRQ QLY 


VY xX xX XX xX xX XXXXXXY 
SRM K KKK KRY 
If asserting BS16# requires a second bus 
cycle to be performed, the second cycle is 
performed before hold acknowledge 
OY? 
MMO 


(Negated, or last locked cycle) 


Valid 1 


X vast 


LOQRRY 
32-bit 


bus size 


DAAAABALA 


Valid 1 


XXX XXK XXX XK XK XXXX XXX KK VY 
KK KEK KKK AK KREK 


HOLD asserted no later 
than READY# asserted 
| 


—- (Floating) -— 


| 
—- (Floating) -— 


YY Y 


DAADAAAAAA 


Aim 


OK 


OR OY 


DAAAAALALBAA 


every bus state. Violating setup or hold requirements results in incorrect operation. 
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HOLD is a synchronous input and can be asserted at any CLK2 edge, provided setup and hold requirements are met in 
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Figure 4-24. Tl486SXL Requesting Hold from Active Pipelined Bus 
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every bus state. Violating setup or hold requirements will result in incorrect operation. 
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HOLD is a synchronous input and can be asserted at any CLK2 edge, provided setup and hold requirements are met in 


The data-bus, address-bus, and bus-cycle-definition signals, and the copro- 
cessor interface signals (PEREQ, BUSY#, and ERROR#), control commu- 
nication between the TI486SXL series microprocessor and a coprocessor. 
The microprocessor decodes coprocessor or ESC opcodes and transfers the 
opcode and operands to the coprocessor via I/O port accesses. Address 8000 
OOF8h functions as the control-port address, and 8000 OOFCh is used for oper- 


and transfers. 
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Coprocessor cycles can be read or write and can be nonpipelined or pipelined. 
Coprocessor cycles must be terminated by READY# and, as with any other 
bus cycle, can be terminated as early as the second bus state of the cycle. 


BUSY#, ERROR#, and PEREQ are asynchronous level-sensitive inputs that 
synchronize CPU and coprocessor operation. All three signals are sampled 
at the beginning of phase one (1) and must meet specified setup and hold 
times to be recognized at a given CLK2 edge. 


4.4.11 SMM Interface 


System Management Mode (SMM) uses two TI486SXL microprocessor pins, 
SMI# and SMADS#. The bidirectional SMI# pin is a nonmaskable interrupt that 
is a higher priority than the NMI input. SMl# must be active for at least four 
CLK2 periods to be recognized by the microprocessor. Once the microproces- 
sor recognizes the active SMI# input, the CPU drives the SMI# pin low for the 
duration of the SMI service routine. 


The SMADS#¥ pin outputs the SMM address strobe that indicates an SMM 
memory bus cycle is in progress and a valid SMM address is on the address 
bus. The SMADS# functional timing, output delay times, and float delay times 
are identical to the main memory address strobe (ADS#) timing. 


4.4.11.1 SMI Handshake 


The functional timing for the SMI# interrupt is shown in Figure 4—25. Five sig- 
nificant events take place during an SMI# handshake: 


1) The SMI# input pin is driven active (low) by the system logic. 

2) The CPU samples SMI# active on the rising edge of CLK2 phase one ($1). 

3) Four CLK2 edges after sampling the SMI# active, the CPU switches the 
SMI# pin to an output and drives SMI# low. 

4) Following execution of the RSM instruction, the CPU drives the SMI# pin 
high for two CLK2 edges indicating completion of the SMI service routine. 

5) The CPU stops driving the SMI# pin high and switches the SMI# pin to an 
input in preparation for the next SMI interrupt. The system logic is respon- 
sible for maintaining the SMI# pin at the inactive (high) level after the pin 
has been changed to an input. 


Figure 4-25. Tl486SXL SMI# Timing 
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Indicates that Tl486SXL drives the SMI# pin. 


4.4.11.2 I/O Trapping 


The TI486SXL series provides I/O trapping to facilitate power management of 
I/O peripherals. When an I/O bus cycle is issued, the I/O address is driven onto 
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the address bus and can be decoded by external logic. If a trap to the SMI han- 
dler is required, the SMI# input should be activated at least three CLK2 edges 
before returning the READY# input for the I/O cycle. The timing for creating 
an I/O trap via the SMI# input is shown in Figure 4—26. The microprocessor 
immediately traps to the SMI interrupt handler following execution of the I/O 
instruction. No other instructions are executed between completing the I/O 
instruction and entering the SMI service routine. The I/O trap mechanism is not 
active during coprocessor accesses. 


Figure 4-26. Tl486SXL I/O Trap Timing 
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4.4.12 Power Management 


The power-management features in the Tl486SXL(C) family of microproces- 
sors allow a dramatic reduction in the current required when the microproces- 
sor is in suspend mode (typically less than three percent of the operating cur- 
rent). Suspend mode is entered either by a hardware- or software-initiated 
action. 


Using the hardware to initiate suspend mode involves a two-pin handshake 
using the SUSP# and SUSPA# signals. Using the software involves initiating 
the suspend mode through execution of the HALT instruction. Additional pow- 
er management can be achieved by stopping and restarting the input clock. 
This technique is available because the TlI486SXLC series microprocessors 
are static devices, meaning that the clock can be stopped and restarted with- 
out loss of any internal CPU data. See subsection 4.4.12.3, Stopping the Input 
Clock, on page 4-52 


4.4.12.1 SUSP#-Initiated Suspend Mode 
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The TI486SXL series microprocessor enters suspend mode when the SUSP# 
input is asserted and execution of the current instruction, any pending de- 
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coded instructions, and associated bus cycles are completed. The micropro- 
cessor also waits for the coprocessor to indicate a not-busy status (BUSY#=1) 
before entering suspend mode. The SUSPA# output is then asserted. The 
microprocessor responds to SUSP# and asserts SUSPA# only if the SUSP bit 
is set in the CCRO Configuration register. 


Figure 4—27 illustrates the microprocessor functional timing for SUSP#-initi- 
ated suspend mode. SUSP# is sampled on the phase two (2) CLK2 rising 
edge and must meet specified setup and hold times to be recognized at a par- 
ticular CLK2 edge. The time from assertion of SUSP# to activation of SUSPA# 
varies depending on which instructions were decoded prior to assertion of 
SUSP#. The minimum time from SUSP# sampled active to SUSPA# asserted 
is two CLK2 periods. As a maximum, the microprocessor can execute up to 
two instructions and associated bus cycles before asserting SUSPA#. The 
time required for the microprocessor to deactivate SUSPA# once SUSP# has 
been sampled inactive is four CLK2 periods. 


Figure 4-27. Tl486SXL SUSP#-Initiated Suspend Mode 
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If the microprocessor is in a hold-acknowledge state and SUSP# is asserted, 
the processor may or may not enter suspend mode depending on the state of 
the microprocessor internal execution pipeline. If the microprocessor is in a 
SUSP#-initiated suspend state and the CLK2 input is not stopped, the proces- 
sor recognizes and acknowledges the HOLD input. The microprocessor 
stores the occurrence of FLUSH#, NMI, and INTR (if interrupts are enabled) 
for execution once suspend mode is exited. 


4.4.12.2 Halt-Initiated Suspend Mode 


The TI486SXL series microprocessor also enters suspend mode as a result 
of executing a HALT instruction. The SUSPA# output is asserted no more than 
17 CLK2 periods following READY# sampled active for the HALT bus cycle as 
shown in Figure 4-28. Suspend mode is then exited upon recognition of an 
NMI, SMI#, or an unmasked INTR. SUSPA# is deactivated 12 CLK2 periods 
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after sampling an active NMI, SMI#, or unmasked INTR. If the microprocessor 
is in a HALT-initiated suspend mode and the CLK2 input is not stopped, the 
processor recognizes and acknowledges the HOLD input. The microproces- 
sor stores the occurrence of FLUSH# for execution once suspend mode is ex- 
ited. 


Figure 4-28. Tl486SXL HALT-Initiated Suspend Mode 
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Because the Tl486SXL series microprocessors are static devices, the input 
clock (CLK2) can be stopped and restarted without loss of any internal CPU 
data. This assumes that the Tl486SXL2 microprocessor is in nonclock- 
doubled mode when the input clock is stopped. (Refer to subsection 4.2.1, 
Clock Doubling Using Software Control, page 4-15.) CLK2 can be stopped in 
either phase one (¢1) or phase two (2) of the clock and in either a logic-high 
or logic-low state. However, entering suspend mode before stopping CLK2 
dramatically reduces the CPU current requirements. Therefore, the recom- 
mended sequence for stopping CLK2 in the Tl1486SXLC2 series microproces- 
sor from clock-doubled mode is: 


= 


Bring the microprocessor out of clock-doubled mode 


) 
2) Initiate suspend mode 
3) Wait for the microprocessor to assert SUSPA# 
4) Stop the input clock 
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ET | 
Note: 


Suspend mode can be entered while in clock-doubled mode as long as CLK2 


is not scaled or stopped. 
[a | 


For all other cases, including the Tl486SXLC2 in nonclock-doubled mode, the 
recommended sequence is: 


1) Initiate suspend mode 
2) Wait for the microprocessor to assert SUSPA# 
3) Stop the input clock 


The Tl486SXL series microprocessor remains suspended until CLK2 is re- 
started and suspend mode is exited as described above. While CLK2 is 
stopped, the microprocessor can no longer sample and respond to any input 
stimulus including the HOLD, FLUSH#, NMI, SMI#, INTR, and RESET inputs. 
Figure 4—29 illustrates the recommended sequence for stopping CLK2 using 
SUSP# to initiate suspend mode. CLK2 should be stable for a minimum of 10 
clock periods before SUSP# is negated. 


Figure 4-29. Tl486SXL Stopping CLK2 During Suspend Mode 
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4.4.13 Float (144-Pin QFP and 168-Pin PGA Pinouts Only) 


Activating the FLT# input on the 144-pin or 168-pin TI486SXL floats all bidirec- 
tional and output signals. Asserting FLT# electrically isolates the microproces- 
sor from the surrounding circuitry. This feature is useful in systems designs 
that contain an upgrade socket. 


FLT# is an asynchronous, active-low input. It is recognized on the rising edge 
of CLK2. When recognized, it aborts the current bus state and floats the out- 
puts of the microprocessor as shown in Figure 4-30. FLT# must be asserted 
for a minimum of 16 CLK2 cycles. To exit the float condition, RESET should 
be asserted and held asserted until after FLT# is negated. 


Asserting the FLT# input unconditionally aborts the current bus cycle and 
forces the microprocessor into the float mode. As a result, the microproces- 
sors are not guaranteed to enter float in a valid state. After deactivating FLT#, 
the CPU is not guaranteed to exit float in a valid state. The microprocessor 
RESET input must be asserted before exiting float to ensure that the micropro- 
cessor is reset and that it returns in a valid state. 


Figure 4-30. Tl486SXL Entering and Exiting Float 
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Electrical Specifications 


This chapter provides electrical specifications for the TlI486SXL(C) family of 
microprocessors. The specifications include electrical connection require- 
ments for all package pins, maximum ratings, recommended operating condi- 
tions, dc electrical characteristics, and ac characteristics. 
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Electrical Connections 


5.1 Electrical Connections 


This section provides specific requirements for power and ground connec- 
tions, decoupling, termination of inputs with internal pullup/pulldown resistors, 
termination of system functional inputs requiring external pullup resistors, ter- 
mination of unused inputs, and connection to terminals designated NC. 


5.1.1. Power and Ground Connections and Decoupling 


The high-frequency operation of the TlI486SXL(C) microprocessors makes it 
necessary to install and test the devices using standard high-frequency tech- 
niques. The high clock frequencies used in the microprocessors and their out- 
put buffer circuits can cause transient power surges when several output buff- 
ers switch output levels simultaneously. These effects can be minimized by fil- 
tering the dc power leads with low-inductance decoupling capacitors, using 
low-impedance wiring, and by making connection to all of the Voc, Vecs; and 
Vss (GND) terminals. 


5.1.2 Pullup/Pulldown Resistors 


Table 5—1 lists the input terminals that are internally connected to pullup or 
pulldown resistors (see Figure 5-1). The pullup resistors are connected to 
Vcc. The pulldown resistors are connected to Vgg. Unused inputs do not re- 
quire connection to external pullup or pulldown resistors. 


|... 0.0 — 
Note: 


The internal pullup and pulldown resistors are designed to tie off the individu- 
al internal signal associated with that pin. External signals should not be ter- 


minated to any of these pins. 
[| 


Table 5—1. Terminals Connected to Internal Pullup and Pulldown Resistors 


TI486SXLC TI486SXL TI486SXL TI486SXL 

Signal 100-Terminal 132-Terminal 144-Terminal 168-Terminal Resistor 
A20M# 31 F13 43 D15 Pullup 
BUSY# 34 B9 48 S4 Pullup 
BS16# — C14 115 C17 Pullup 
ERROR# 36 A8 49 Al2 Pullup 
FLT# 28 — 40 C11 Pullup 
FLUSH# 30 E13 42 C15 Pullup 
KEN# 29 B12 41 F15 Pullup 
MEMW# — — 66 B16 Pullup 
PEREQ 37 C8 50 R17 Pulldown 
SMI# 47 C7 67 B10 Pullup 
SUSP# 43 A4 63 C13 Pullup 
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Figure 5—1. Internal Pullup/Pulldown-IV Characteristic 
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Connect the ADS# and LOCK# output terminals to pullup resistors, as indi- 
cated in Table 5-2. The external pullups ensure that the signals remain ne- 


gated during hold-acknowledge states. 


Table 5—2. Terminals Requiring External Pullup Resistors 


TI486SXLC TI486SXL TI486SXL TI486SXL External 

Signal 100-Terminal 132-Terminal 144-Terminal 168-Terminal Resistor 
ADS# 16 E14 26 $17 20-kQ pullup 
LOCK# 26 C10 38 N15 20-kQ pullup 


5.1.3 NC Designated Terminals 


Terminals designated NC should be left disconnected. Connecting or terminat- 
ing any NC terminal(s) to a pullup resistor, pulldown resistor, or an active signal 
can cause unpredictable results or nonperformance of the microprocessor. 


5.1.4 Unused Signal Input Terminals 


All signal inputs not used by the system designer and not listed in Table 5—1 
should be connected either to Vss orto Vcc. Connect active-high inputs to Vss 
through a 20-kQ (+10%) pulldown resistor and active-low inputs to Vcc 
through a 20-kQ (+10%) pullup resistor to prevent possible spurious operation. 
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5.2 Absolute Maximum Ratings 


The absolute maximum ratings provide specific limits regarding power supply 


and input voltages, input and output current limits, and operating and storage 
temperatures. 


Table 5-3 specifies the absolute maximum ratings for the Tl486SXL(C) family 
of microprocessors. 


Table 5-3. Absolute Maximum Ratings Over Operating Free-Air Temperature Range 
(Unless Otherwise Noted) Tt 


Parameter 


V 
Supply voltage, V : E 
Voltage on any terminal With respect to Vgs -0.5 Voco+0.5 Vv 
Case temperature —EE Power applied °C 
Storagetemperature | Nobis, =| 05 tt] 

t Stresses beyond those listed under absolute maximum ratings may cause permanent damage to the device. These are stress 


ratings only and functional operation of the device at these or any other conditions beyond those indicated under recommended 


operating conditions is not implied. Exposure to absolute-maximum-rated conditions for extended periods may affect device 
reliability. 


Recommended Operating Conditions 


5.3 Recommended Operating Conditions 


5.3.1 


Recommended operating conditions provide specific values for power supply 
and input voltages, required input threshold ranges, output drive currents 
available for system interfacing, and operating levels for clamp currents and 
case temperature. 


3.3-Volt Microprocessors With 5-Volt Tolerant Inputs, Outputs, and I/Os 


Table 5-4 presents the recommended operating conditions for the 
TI486SXL-G 3.3-V microprocessors with 5-V-tolerant inputs, outputs, and 
/Os. 


During power up and power down conditions, the 3.3-V Vcc terminals and the 
5-V Vcocs terminal should be ramped simultaneously. The 3.3-V Vcc voltage 
should not exceed the 5-V Vccs voltage by more than 1 V or the device may 
not initialize correctly. Conversely, the 5-V Vocs5 can exceed the 3.3-V Voc by 
up to 2.25 V. 


Table 5—4. TlI486SXL-G Recommended Operating Conditions 


Min Max | Unit 
Vcc Supply voltage With respect to Vss See Note 1 3 3.6 Vv 
Vocs Supply voltage With respect to Vss See Note 2 3 5.25 Vv 
VIH High-level input voltage 2 Vocs5t+0.3 Vv 
VIL Low-level input voltage -0.3 0.6 Vv 
VILC CLK2 low-level input voltage —0.3 0.5 Vv 
VIHC CLK2 high-level input voltage Vcoc-0.3 Voc5+0.3 Vv 
IOH High-level output current VOH = VOH(min —2| mA 
IOL Low-level output current VOL=VOL(max 5| mA 
Phase- locked loop frequency With respect to CLK2 
PLLLOCK lock range frequency 32 30:))| ME 
TI486SXLC in 100-pin 
QFP 0 85 
Power TI486SXL in 132- and 3 
Tc Case temperature applied 168-pin PGA 0 85 Cc 
TI486SXL in 144-pin 
QFP 0 85 
Notes: 1) Vcc should be no more than 1 V greater than Vocs5 during power up or the device may not initialize correctly. 


Vccs should be connected to the 3.3-V supply in a 3.3-V-only system. In mixed systems (3.3/5 V) Voc5 should be 


connected to the 5-V supply. 


Electrical Specifications 


Recommended Operating Conditions 


5.3.2 3.3-Volt Microprocessors 


Table 5-5 presents the 


recommended operating conditions for the 


TI486SXLC-V and TI486SXL-V 3.3-V microprocessors. 


Table 5—5. TI486SXLC-V and Tl486SXL-V Recommended Operating Conditions 


Min Max | Unit 

Voc Supply voltage With respect to Vss 3 3.6 Vv 
VIH High-level input voltage 2 Vcoctr0.3 Vv 
VIL Low-level input voltage -0.3 0.6 Vv 
VILC CLK2 low-level input voltage -0.3 0.5 Vv 
VIHC CLK2 high-level input voltage Voc-0.3. Voc+0.3 Vv 
IOH High-level output current VOH = VOH(min 2} mA 
IOL Low-level output current VOL=VOL(max 5} mA 
PLLLOCK aes sn loop frequency at ea to CLK2 30 50 | MHz 

TI486SXLC in 100-pin 

QFP 
TC Case temperature onied TI486SXL in 132- and °C 


5.3.3 5-Volt Microprocessors 


168-pin PGA 


TI486SXL in 144-pin QFP 


Table 5-6 presents the recommended operating conditions for the 
TI486SXLC and Tl486SXL 5-V microprocessors. 
Table 5-6. TI486SXLC and TI486SXL Recommended Operating Conditions 
Min Max | Unit 
Voc Supply voltage With respect to Vss 4.75 5.25 V 
VIH High-level input voltage 2 Voct0.3 Vv 
VIL Low-level input voltage -0.3 0.8 Vv 
VILC CLK2 low-level input voltage -0.3 0.8 Vv 
VIHC CLK2 high-level input voltage 3.7 Voct+0.3 Vv 
IOH High-level output current VOH=VOH(min) -1] mA 
IOL Low-level output current VOL= VOL(max 5] mA 
Phase- locked loop frequency With respect to CLK2 
PLLLOCK — Igck range frequency 32 50) (Miz 
TI486SXLC in 100-pin ; 
QFP 
Tc Case temperature Powel 


applied 


100 
Tl486SXL in 132- and F 
168-pin PGA 7 sat obo 
Tl486SXL in 144-pin 
ore 0 100 


DC Electrical Characteristics 


5.4 DC Electrical Characteristics 


The dc electrical characteristics tables provide specific data regarding the ca- 
pability of the Tl486SXL(C) family microprocessors to interface directly with 
either CMOS- or TTL-type system functions. Devices are offered for operation 
in 3.3 and 5-volt mixed, 3.3-volt only, and 5-volt only systems. 

5.4.1 3.3-Volt Microprocessors With 5-Volt-Tolerant Inputs 
Table 5-7 covers the 3.3-V 40, 20-MHz TI486SXL-G40. 


Table 5-8 on page 5-8 covers the 3.3-V 50-MHz TIl486SXL2-G50. 


Table 5—7. Tl486SXL-G40 Electrical Characteristics at Recommended Operating 


Conditions 
TI486SXL-G40 
Parameter Test Conditions See Note 1 Min Typ Max | Unit 
VOL Low-level output voltage HoL=3mA ssid 0.4 Vv 
as ney ae cee oo : 
I Input current (leakage) Vin =0, VIN = Vcc See Note 2 +15) wA 
High-level input current at 
NH BEReOe VIN = 2.4, See Note 3 200| uA 
li Low-level input current VIL = 0.45 V, See Note 4 —400 HA 
Icc Supply current (Active mode) 20 MHz (CLK2 = 40 MHz) 300 400 mA 
20 MHz 
Iccsm_ Supply current (Suspend mode) (CLK2 = 40 MHz) Sée Notes 15 mA 
Iccss __ Standby supply current Ce: einai’ nae 0.1 1 mA 
C; Input capacitance fo = 1 MHz, See Note 6 10] pF 
Co Output or I/O capacitance fo = 1 MHz, See Note 6 12 pF 
CCLK Input capacitance CLK2 fo = 1 MHz, See Note 6 20 pF 
Notes: 1) Typical values are at Vcc = 3.3 V, Vccs5 = 5 V, and Ta = 25°C. 


2 
3 
4 
5) Allinputs at 0 or Vcc. All inputs held static except CLK2 as indicated. All outputs unloaded (static IOUT = 0 mA). 
6) Not 100% tested 


Applicable for all input terminals except those with an internal pullup resistor. See Table 5—1. 
PEREQ has an internal pulldown resistor. 
Applicable for all inputs that have an internal pullup resistor. See Table 5-1. 


) 
) 
) 
) 
) 
) 


ADVANCE INFORMATION concerns new products in the sampling or 
preproduction phase of development. Characteristic data and other 
specifications are subject to change without notice. 
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Table 5-8. TI486SXL2-G50 Electrical Characteristics at Recommended Operating 


Conditions 


TI486SXL2-G50 


Parameter Test Conditions See Note 1 Min 
VOL Low-level output voltage lol =3mA 
; IoH =-1 mA 
VOH High-level output voltage 
IOH =—-0.2 mA 

I Input current (leakage) VIN=0, VIN = Vcc See Note 2 
In Bence input current at Vin = 2.4, See Note 3 
lik Low-level input current VIL = 0.45 V, See Note 4 
loc Supply current (Active mode) 25 MHz (CLK2 = 50 MHz) 

IccSmM__ Supply current (Suspend mode) mee 50 MHz) See Note 5 
Iccss__ Standby supply current OMe, alee seein 
C| Input capacitance fo = 1 MHz, See Note 6 
Co Output or I/O capacitance fo = 1 MHz, See Note 6 
CcLkK Input capacitance CLK2 fo = 1 MHz, See Note 6 
Notes: Typical values are at Vcc = 3.3 V, Vocs5 = 5 V, and Ta = 25°C. 


Not 100% tested 


) 

) Applicable for all input terminals except those with an internal pullup resistor. See Table 5-1. 

) PEREQ has an internal pulldown resistor. 
4) Applicable for all inputs that have an internal pullup resistor. See Table 5-1. 

) Allinputs at 0 or Vcc. All inputs held static except CLK2 as indicated. All outputs unloaded (static IoyT = 0 mA). 

) 


ADVANCE INFORMATION concerns new procucts in the sampling or 


preproduction phase of development. C 


aracteristic data and other 


specifications are subject to change without notice. 


DC Electrical Characteristics 


5.4.2 3.3-Volt Microprocessors 
Table 5-9 covers the 3.3-V 25-MHz TI486SXLC-V25. 
Table 5-10 on page 5-10 covers the 3.3-V 40, 20 MHz TI486SXL-V40. 
Table 5-11 on page 5-11 covers the 3.3-V 50, 25 MHz TI486SXL2-V50. 


Table 5-9. TlI486SXLC-V25 Electrical Characteristics at Recommended Operating 
Conditions 


TI486SXLC-V25 
Parameter Test Conditions See Note 1 Min Typ Max | Unit 


VOL Low-level output voltage loL=3mA 0.4 Vv 

; IOH =-1 mA 2.4 

VOH High-level output voltage Vv 
IQH = —0.2 mA Voc—0.4 

I Input current (leakage) VIN=0, VIN = Vcc See Note 2 +15 HA 


High-level input current at 


IIH PEREQ VIN = 2.4, See Note 3 200} wA 
lit Low-level input current VIL = 0.45 V, See Note 4 —400 HA 
Icc Supply current (Active mode) 25 MHz 225 285 mA 
ICCSM _ Supply current (Suspend mode) 6 mA 


0 MHz, Suspended/CLk2 stopped, 


Iccss Standby supply current See Note 5 0.1 1 mA 

C| Input capacitance fo = 1 MHz, See Note 6 10 pF 

Co Output or I/O capacitance fo = 1 MHz, See Note 6 12 pF 

CCLK Input capacitance CLK2 fo = 1 MHz, See Note 6 20 pF 
Notes: 1) Typical values are at Vcc = 3.3 V and Ta = 25°C. 


2) Applicable for all input terminals except those with an internal pullup resistor. See Table 5—1. 

3) PEREQ input has an internal pulldown resistor. 

4) Applicable for all inputs that have an internal pullup resistor. See Table 5—1. 

5) All inputs at 0 or Vcc. All inputs held static except CLK2 as indicated. All outputs unloaded (static IoyT = 0 mA). 


) 
) 
) 
) 
) 
6) Not 100% tested 


ADVANCE INFORMATION concerns new products in the sampling or 
preproduction phase of development. Characteristic data and other 
specifications are subject to change without notice. 
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Table 5-10. TlI486SXL-V40 Electrical Characteristics at Recommended Operating 


Conditions 


TI486SXL-V40 


Parameter Test Conditions See Note 1 Min 
VOL Low-level output voltage lol =3mA 
' IoH =-1 mA 
VOH High-level output voltage 
IOH =—-0.2 mA 

I Input current (leakage) VIN=0, VIN = Vcc See Note 2 
In Bence input current at Vin = 2.4, See Note 3 
lik Low-level input current VIL = 0.45 V, See Note 4 
loc Supply current (Active mode) 20 MHz (CLK2 = 40 MHz) 

IccSmM — Supply current (Suspend mode) ones 40 MHz) See Note 5 
Iccss__ Standby supply current OMe, alee see tinie 
C| Input capacitance fo = 1 MHz, See Note 6 
Co Output or I/O capacitance fo = 1 MHz, See Note 6 
CcLkK Input capacitance CLK2 fo = 1 MHz, See Note 6 
Notes: Typical values are at Voc = 3.3 V and Ta = 25°C. 
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Not 100% tested 


) 

) Applicable for all input terminals except those with an internal pullup resistor. See Table 5-1. 

) PEREQ has an internal pulldown resistor. 
4) Applicable for all inputs that have an internal pullup resistor. See Table 5-1. 

) Allinputs at 0 or Vcc. All inputs held static except CLK2 as indicated. All outputs unloaded (static IoyT = 0 mA). 

) 


ADVANCE INFORMATION concerns new products in the sampling or 


preproduction phase of development. C 


aracteristic data and other 


specifications are subject to change without notice. 


DC Electrical Characteristics 


Table 5—11. Tl486SXL2-V50 Electrical Characteristics at Recommended Operating 


Conditions 
TI486SXL2-V50 
Parameter Test Conditions See Note 1 Min Typ Max | Unit 
VOL Low-level output voltage loL=3mA 0.4 V 
: IOH =—-1 mA 2.4 
VOH High-level output voltage Vv 
IQH =—0.2 mA Voc—0.4 
I Input current (leakage) VIN=0, VIN = Vcc See Note 2 +15 A 
High-level input current at a 
WH PEREQ VIN = 2.4, See Note 3 200] pA 
li Low-level input current VIL = 0.45 V, See Note 4 —400 HA 
loc Supply current (Active mode) 25 MHz (CLK2 = 50 MHz) 365 500 mA 
25 MHz 
ICCSM _ Supply current (Suspend mode) (CLK2 = 50 MHz) See Note 5 20 mA 
0 MHz, Suspended/CLk2 stopped, 
Iccss __ Standby supply current See Note 5 0.1 1 mA 
C| Input capacitance fo = 1 MHz, See Note 6 10 pF 
Co Output or I/O capacitance fo = 1 MHz, See Note 6 12 pF 
CCLK Input capacitance CLK2 fo = 1 MHz, See Note 6 20 pF 
Notes: 1) Typical values are at Vcc = 3.3 V and Ta = 25°C. 


) 

) Applicable for all input terminals except those with an internal pullup resistor. See Table 5—1. 
3) PEREQ has an internal pulldown resistor. 
) 

) 
) 


BS 


Applicable for all inputs that have an internal pullup resistor. See Table 5-1. 
All inputs at 0 or Vcc. All inputs held static except CLK2 as indicated. All outputs unloaded (static IoyT = 0 mA). 
Not 100% tested 


(o>) 


ADVANCE INFORMATION concerns new products in the sampling or 
preproduction phase of development. Characteristic data and other 
specifications are subject to change without notice. 
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5.4.3 5-Volt Microprocessors 
Table 5-12 covers the 5-V 40, 20-MHz Tl486SXLC-040. 
Table 5-13 on page 5-13 covers the 5-V 50, 25-MHz TI486SXLC2-050. 
Table 5-14 on page 5-14 covers the 5-V 40, 20-MHz Tl486SXL-040. 
Table 5-15 on page 5-15 covers the 5-V 50. 25-MHz TIl486SXL2-050. 


Table 5-12. Tl486SXLC-040 Electrical Characteristics at Recommended Operating 


Conditions 
TI486SXLC -040 
Parameter Test Conditions See Note 1 Min Typ Max | Unit 
VOL Low-level output voltage loL=5mA 0.4 V 
; IOH =-1 mA 2.4 
VOH High-level output voltage V 
IOQH =—0.2 mA Voc—0.5 
I Input current (leakage) VIN=0, VIN = Voc See Note 2 +15 uA 


High-level input current at 


ItH PEREQ VIN = 2.4, See Note 3 LA 
NIL Low-level input current VIL = 0.45 V, See Note 4 LA 
Icc Supply current (Active mode) 20 MHz (CLK2 = 40 MHz) 580 725 mA 
IccSM __ Supply current (Suspend mode) cles 40 MHz) See Note 5 10 mA 
Iccss __— Standby supply current Ce PER err rues 0.1 1 mA 
Co Output or I/O capacitance fo = 1 MHz, See Note 6 12 pF 
CcLkK _ Input capacitance CLK2 fo = 1 MHz, See Note 6 20 pF 
Notes: 1) Typical values are at Voc = 3.3 V and Ta = 25°C. 

2) Applicable for all input terminals except those with an internal pullup resistor. See Table 5-1. 

3) PEREQ has an internal pulldown resistor. 

4) Applicable for all inputs that have an internal pullup resistor. See Table 5-1. 

5) Allinputs at 0 or Vcc. All inputs held static except CLK2 as indicated. All outputs unloaded (static IQUT = 0 mA). 

6) Not 100% tested 


ADVANCE INFORMATION concerns new products in the sampling or 
preproduction phase of development. Characteristic data and other 
specifications are subject to change without notice. 
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Table 5-13. Tl486SXLC2-050 Electrical Characteristics at Recommended Operating 


Conditions 
TI486SXLC2-050 
Parameter Min Typ Max | Unit 
VOL Low-level output voltage lol =5mA 0.45 Vv 
; IOH =—-1 mA 2.4 
VOH High-level output voltage Vv 
IQH =—0.2 mA Voc—0.5 
I Input current (leakage) VIN=0, VIN = Vcc See Note 2 +15 yA 
NW See ee Vin = 2.4, See Note 3 200| pA 
li Low-level input current VIL = 0.45 V, See Note 4 —400 HA 
Ioc Supply current (Active mode) 25 MHz (CLK2 = 50 MHz) 640 850 mA 
ICCSM _ Supply current (Suspend mode) anes 50 MHz) See Note 5 9 mA 
Iccss Standby supply current ONE i seed lr chee 0.1 1 mA 
C| Input capacitance fo = 1 MHz, See Note 6 10 pF 
Co Output or I/O capacitance fo = 1 MHz, See Note 6 12 pF 
CCLK Input capacitance CLK2 fo = 1 MHz, See Note 6 20 pF 
Notes: 1) Typical values are at Vcc = 3.3 V and Ta = 25°C. 

2) Applicable for all input terminals except those with an internal pullup resistor. See Table 5—1. 

3) PEREQ has an internal pulldown resistor. 

4) Applicable for all inputs that have an internal pullup resistor. See Table 5—1. 

5) Allinputs at 0.4 or Vc¢c—0.4 (CMOS levels). All inputs held static except CLK2 as indicated. All outputs unloaded 


(static IOUT = 0 mA). 
6) Not 100% tested 


ADVANCE INFORMATION concerns new products in the sampling or 
preproduction phase of development. Characteristic data and other 
specifications are subject to change without notice. 
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Table 5-14. Tl486SXL-040 Electrical Characteristics at Recommended Operating 


Conditions 


TI486SXL-040 


Parameter Test Conditions See Note 1 Min 
VOL Low-level output voltage lol =5mA 
' IoOH =-1 mA 
VOH High-level output voltage 
IOH =—-0.2 mA 

I Input current (leakage) VIN=0, VIN = Vcc See Note 2 
In Bence input current at Vin = 2.4, See Note 3 
lik Low-level input current VIL = 0.45 V, See Note 4 
loc Supply current (Active mode) 20 MHz (CLK2 = 40 MHz) 

IccSmM — Supply current (Suspend mode) ones 40 MHz) See Note 5 
Iccss__ Standby supply current OMe, Se ee 
C| Input capacitance fo = 1 MHz, See Note 6 
Co Output or I/O capacitance fo = 1 MHz, See Note 6 
CcLkK Input capacitance CLK2 fo = 1 MHz, See Note 6 
Notes: Typical values are at nominal Vcc = 3.3 V and Ta = 25°C. 
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Not 100% tested 


) 

) Applicable for all input terminals except those with an internal pullup resistor. See Table 5-1. 

) PEREQ input has an internal pulldown resistor. 
4) Applicable for all inputs that have an internal pullup resistor. See Table 5-1. 

) Allinputs at 0 or Vcc. All inputs held static except CLK2 as indicated. All outputs unloaded (static IoyT = 0 mA). 

) 


ADVANCE INFORMATION concerns new procucts in the sampling or 


preproduction phase of development. C 


aracteristic data and other 


specifications are subject to change without notice. 


DC Electrical Characteristics 


Table 5—15. Tl486SXL2-050 Electrical Characteristics at Recommended Operating 


Conditions 
TI486SXL2-050 
Parameter Test Conditions See Note 1 Min Typ Max | Unit 
VOL Low-level output voltage loL=5mA 0.45 V 
; IOH =—-1 mA 2.4 
VOH High-level output voltage Vv 
IQH =—0.2 mA Voc—0.5 
I Input current (leakage) VIN=0, VIN = Vcc See Note 2 +15 A 
High-level input current at a 
lH PEREQ VIN = 2.4, See Note 3 200] pA 
li Low-level input current VIL = 0.45 V, See Note 4 —400 HA 
Ioc Supply current (Active mode) 25 MHz (CLK2 = 50 MHz) 670 900 mA 
25 MHz 
ICCSM _ Supply current (Suspend mode) (CLK2 = 50 MHz) See Note 5 10 mA 
0 MHz, Suspended/CLk2 stopped, 
Iccss Standby supply current See Note 5 0.1 1 mA 
C| Input capacitance fo = 1 MHz, See Note 6 10 pF 
Co Output or I/O capacitance fo = 1 MHz, See Note 6 12 pF 
CCLK Input capacitance CLK2 fo = 1 MHz, See Note 6 20 pF 
Notes: 1) Typical values are at nominal Vcc = 3.3 V and Ta = 25°C. 


) 

) Applicable for all input terminals except those with an internal pullup resistor. See Table 5—1. 
3) PEREQ input has an internal pulldown resistor. 
) 

) 
) 


BS 


Applicable for all inputs that have an internal pullup resistor. See Table 5—1. 


(o>) 


Not 100% tested 


ADVANCE INFORMATION concerns new products in the sampling or 
preproduction phase of development. Characteristic data and other 
specifications are subject to change without notice. 


Electrical Specifications 


All inputs at 0 or Vcc. All inputs held static except CLK2 as indicated. All outputs unloaded (static IoyT = 0 mA). 
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AC Characteristics 

5.5 AC Characteristics 
The ac characteristics provide detailed information regarding measurement 
points, specific requirements for setup and hold times, and propagation delay 
times of the TI486SXL(C) microprocessors. 

5.5.1 Measurement Points for AC Characteristics 
The rising-clock-edge reference level V-efc, and other reference levels are 


specified in Table 5-16 for the TI486SXL(C) family of microprocessors. Input 
or output signals must cross these levels during testing. 


Table 5-16. Measurement Points for AC Characteristics 


Figure 5—2 and Figure 5-3 show delays (A and B) and input setup and hold 
times (C and D). Input setup and hold times (C and D) are specified minimums, 
defining the smallest acceptable sampling window during which a synchro- 
nous input signal must be stable for correct operation. 


The TI486SXLC microprocessor outputs A23-A1, ADS#, BHE#, BLE#, 
D/C#, HLDA, LOCK#, M/lIO#, SMADS#, SMI#, and W/R# change only at the 
beginning of phase one (Figure 5—2, )1). Outputs D15—D0 (write cycles) and 
SUSPA# change at the beginning of phase two (2). 


The TI486SXLC microprocessor inputs BUSY#, D15—D0 (read cycles), ER- 
ROR#, FLT#, HOLD, PEREQ, and READY# are sampled at the beginning of 
phase one (Figure 5—2, $1). Inputs AZOM#, FLUSH#, INTR, KEN#, NA#, NMI, 
SMI# and SUSP# are sampled at the beginning of phase two (2). 


The TI486SXL microprocessor outputs A31—A2, ADS#, BE3#-— BEO#, D/C#, 
HLDA, LOCK#, M/IO#, SMADS#, SMI#, and W/R# change only at the begin- 
ning of phase one (Figure 5—3, 1). Outputs D31—DO0 (write cycles) and SUS- 
PA# change at the beginning of phase two (2). 


The Tl486SXL microprocessor inputs BUSY#, D31—D0 (read cycles), ER- 
ROR#, HOLD, PEREQ, and READY# are sampled at the beginning of phase 1 
(Figure 5-3, 1). Inputs AZOM#, BS16, FLUSH#, INTR, KEN#, NA#, NMI, 
SMI# and SUSP# are sampled at the beginning of phase two (2). 


AC Characteristics 


Figure 5-2. TI486SXLC Drive Level and Measurement Points for AC Characteristics 


Tx 
| o1 2 
CLK2: OG en eee a, 
« (a) '. Max 
OUTPUTS: Min 
A23—A1, ADS# — ©) 
BHE#, BLE#, D/C#, Valid ¥ Valid 
HLDA, LOCK#, Outputn ‘ref ref Output n+1 
M/lO#, SMADS#, 
SMI#, W/R# 
'¢ (A) i Max 
OUTPUTS ian 
D15—D0 Valid y . Valid 
SUSPA# Outputn “ref ref Output n+1 
INPUTS: le aS >< laa > 
oO) 0) 
Sse VIHD W4 Valid yy 
NA#, NMI, SMI#, VILD A 
SUSP# 
a > 
INPUTS: ae <—(C) >) 
rae VV Valid Vj 
D15-D0, Yip Vref Input Vref Ws 
ERROR#, FLT#, VILD LA 
HOLD, PEREQ, 
READY# 


Legend: A — Maximum Output Delay Specification 
B — Minimum Output Delay Specification 
C — Minimum Input Setup Specification 
D — Minimum Input Hold Specificaton 
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Figure 5—3. TI486SXL Drive Level and Measurement Points for AC Characteristics 


| 
| o1 


Tx 


2 


CLK2: Vrefc Vref 


pl 


l¢ ay pM 
OUTPUTS: | ee 
A31—A2, ADS# Min 
BE3#-BE0#, D/C# 
, > Valid Valid 
HLDA, LOCK#, Vref Vref 
M/lO#, SMADS#, Output n Output n+1 
SMI#,W/R# 
@ (A) p— Max 
min! 
OUTPUTS: Valid V V Valid 
D31—D0, SUSPA# Outputn “ref ref Output n+1 
INPUTS: l¢—(€) (0) 
A20M#, BS16, VIHD 
FLUSH#, INTR, VW * % y 
KEN#, NA#, NMI, 7 Jr ret et ref 
SMI#, SUSP# ILD 
, l¢—(C)—_ 1) 
INPUTS: VIED as NaS 


BUSY#, D31—DO, 
ERROR#, HOLD, 
PEREQ, READY# 


Legend: A — Maximum Output Delay Specification 
B — Minimum Output Delay Specification 
C — Minimum Input Setup Specification 
D — Minimum Input Hold Specificaton 
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5.5.2 CLK2 Timing Measurement Points 


The CLK2 timing measurement points are illustrated in Figure 5—4 for the 
TI486SXL(C) family of microprocessors. 


Figure 5—4. CLK2 Timing Measurement Points 
4 T1 > 


a 


| — T2b 


—> \e— 75 To —> —> «14 


¢—— T3a ——>} 


5.5.3. AC Data Characteristics Tables 


Parametric ac characteristics include output delays, input setup requirements, 
input hold requirements, and output float delays. These characteristics are 
based on the measurement points identified in Figure 5-2 on page 5-17, 
Figure 5-3 on page 5-18, and Figure 5-4. 


Electrical Specifications 5-19 


AC Characteristics 


5.5.3.1 AC Data for 3.3-Volt Microprocessors With 5-Volt Tolerant Inputs 


Table 5—17.AC Characteristics for Tl486SXL-G40 (See Note 1) 


Table 5-17 covers the 3.3-V 40, 20-MHz TI486SXL-G40. 


Table 5-18 on page 5-21 covers the 3.3-V 50-MHz Tl486SXL2-G50. 


TI486SXLG40 
Symbol Parameter MIN MAX Unit Notes 
CLK2 frequency range 32 40 
T1 CLK2 period 12.5 Note 2 
T2a CLK2 high time 5 Note 3 
T2b CLK2 high time 3.25 Note 3 
T3a CLK2 low time 5 Note 3 
T3b CLK2 low time 3.25 Note 3 
T4 CLK2 fall time Note 3 
T5 CLK2 rise time Note 3 
T6 A31-A2 valid delay 3 CL = 50 pF 
T6a SMI# valid delay 3 CL = 50 pF 
T7 A31-A2 float delay 3 Note 4 
T8 BE3# — BEO#, LOCK# valid delay 3 CL = 50 pF 
T9 BE3# — BEO#, LOCK# float delay 3 Note 4 
T10 ADS#, D/C#, M/IO#, W/R# valid delay 3 CL = 50 pF 
T10a_ | SMADS# valid delay 3 CL = 50 pF 
T11 ADS#, D/C#, M/IO#, W/R# float delay 3 Note 4 
Tila | SMADS# float delay 3 Note 4 
T12 D31—D0 write data, SUSPA# valid delay 5 CL = 50 pF, 
T12a_ | D31-D0 write data hold time 2 Note 5 
T13 D31—D0 write data, SUSPA# float delay 3 Notes 4, 6 
714 HDLA valid delay 3 CL = 50 pF 
T15 A20M#, FLUSH#, KEN#, NA#, SUSP# setup time 5 
T16 A20M#, FLUSH#, KEN#, NA#, SUSP# hold time 2 
T17 BS16# setup time 5 
T18 BS16# hold time 2 
T19 READY# setup time 3) 
T20 READY# hold time 3 
T21 D31-—D0 read data setup time 5 
T22 D31—D0 read data hold time 3 
T23 HOLD setup time 4 
T24 HOLD hold time 2 
T25 RESET setup time 4.5 ns 5-5 
T26 RESET hold time 2 5-5 Note 5 
T27 NMI, INTR setup time 5 
T27a_ | SMI# setup time 5 rig 
T28 NMI, INTR hold time 5 
T28a_ | SMl# hold time 5 
T29 PEREQ, ERROR#, BUSY# setup time 5 on 
T30 PEREQ, ERROR#, BUSY# hold time 3 
T31 | Clock-doubled PLL lock time 20 us |__| Note8 
Notes: 1) Voc =3V to 3.6 V, Vocs = 4.75 V to 5.25 V or 3 V to 3.6 V, To = 0 to 85°C 
2) Input clock can be stopped; therefore, minimum CLK2 frequency is 0 MHz. 
3) These parameters are not tested. They are determined by design characterization. 
4) Float condition occurs when maximum output current becomes less than lj in magnitude. Float is not 100% tested. 
5) Not 100% tested. 
6) SUSPA# floats only in response to activation of FLT#. SUSPA# does not float during a hold-acknowledge state. 
7) These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing pur- 
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poses to assure recognition within a specific CLK2 period. 
8) Delay time from setting CKD in CCRO to entering clock-doubled mode. 


ADVANCE INFORMATION concerns new products in the sampling or 
preproduction phase of development. C 
specifications are subject to change without notice. 


aracteristic data and other 


AC Characteristics 


Table 5—18. AC Characteristics for TI486SXL2-G50 (See Note 1) 


TI486SXL2-G50 
Symbol Parameter MIN | MAX | Figure Notes 
CLK2 clock-doubled frequency range 32 50 MHz 
T1 CLK2 period 20 5-4 Note 2 
T2a CLK2 high time 7 5-4 Note 3 
T2b CLK2 high time 4 5-4 Note 3 
T3a CLK2 low time 7 ns | 5-4 Note 3 
T3b CLK2 low time 5 5-4 Note 3 
T4 CLK2 fall time vA 5-4 Note 3 
T5 CLK2 rise time 7 5-4 Note 3 
T6 A31-A2 valid delay 3 21 5-12, 5-15 | CL = 50 pF 
Téa SMI# valid delay 3 30 ns | 5-12, 5-15 | CL = 50 pF 
T7 A31-A2 float delay 4 30 5-15 Note 4 
T8 BE3# — BEO#, LOCK# valid delay 2.5 18 a6 5-12, 5-15 | CL = 50 pF 
T9 BE3# — BEO#, LOCK# float delay 4 30 5-15 Note 4 
T10 ADS#, D/C#, M/IO#, W/R# valid delay 4 19 7" 5-12, 5-15 | CL = 50 pF 
T10a_ | SMADS# valid delay 4 19 5-12, 5-15 | CL = 50 pF 
T11 ADS#, D/C#, M/IO#, W/R# float delay 4 30 . 5-15 Note 4 
Ti1a__| SMADS# float delay 4 30 S| 5-15 Note 4 
T12 D31—D0 write data, SUSPA# valid delay 35 27 5-12, 5-13 | CL = 50 pF, 
T12a D31—D0 write data hold time 2 ns | 5-14 Note 5 
T13 D31—D0 write data, SUSPA# float delay 4 22 5-15 Notes 4, 6 
714 HDLA valid delay 2 22 ns | 5-15 CL = 50 pF 
T15 A20M#, FLUSH#, KEN#, NA#, SUSP# setup time 5 = 5-11 
T16 A20M#, FLUSH#, KEN#, NA#, SUSP# hold time 3.5 5-11 
T17 BS16# setup time 7 Re 5-11 
T18 BS16# hold time 2 5-11 
T19 READY# setup time 9 a 5-11 
T20 READY# hold time 4 5-11 
T21 D31—D0 read data setup time 7 ns Jol 
T22 D31—D0 read data hold time 5 5-11 
T23 HOLD setup time 9 Ge 5-11 
T24 HOLD hold time 3.5 5-11 
T25 RESET setup time 8 ns 5-5 
T26 RESET hold time 3 5-5 Note 5 
T27 NMI, INTR setup time 6 5-10 Note 7 
T27a__| SMI# setup time 6 ns 5-10 Note 7 
T28 NMI, INTR hold time 6 5-10 Note 7 
T28a__| SMl# hold time 6 5-10 Note 7 
T29 PEREQ, ERROR#, BUSY# setup time 6 ne 5-10 Note 7 
T30 PEREQ, ERROR#, BUSY# hold time 5 5-10 Note 7 
T31 | Clock-doubled PLL lock time Note 8 


Notes: 1) Vcc =3V to 3.6 V, Vocs = 4.75 V to 5.25 V or 3 V to 3.6 V, To = 0 to 85 °C 

2) Input clock can be stopped; therefore, minimum CLK2 frequency is 0 MHz. 

3) These parameters are not tested. They are determined by design characterization. 

4) Float condition occurs when maximum output current becomes less than || in magnitude. Float is not 100% tested. 

5) Not 100% tested. 

6) SUSPA# floats only in response to activation of FLT#. SUSPA# does not float during a hold-acknowledge state. 

7) These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing pur- 
poses to assure recognition within a specific CLK2 period. 

8) Delay time from setting CKD in CCRO to entering clock-doubled mode. 


ADVANCE INFORMATION concerns new products in the sampling or 
preproduction phase of development. Characteristic data and other 
specifications are subject to change without notice. 
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AC Characteristics 


5.5.3.2 


AC Data for 3.3-Volt Microprocessors 
Table 5-19 covers the 3.3-V 25-MHz Tl486SXLC-V25. 
Table 5-20 on page 5-23 covers the 3.3-V 40, 20 MHz TI486SXL-V40. 
Table 5-21 on page 5-24 covers the 3.3-V 50 MHZ TI486SXL2-050. 


Table 5-19. AC Characteristics for Tl1486SXLC-V25 (See Note 1) 


a V25 
Parameter Notes 


_ 

CLK2 period i 5-4 Note 2 
Tea CLK2 high time 7 5-4 Note 3 
T2b CLK2 high time 4 5-4 Note 3 
T3a CLK2 low time 7 ns 5-4 Note 3 
T3b CLK2 low time 5 5-4 Note 3 
T4 CLk2 fall time 7 5-4 Note 3 
T5 CLK2 rise time 7 5-4 Note 3 
T6 A23-A1 valid delay 3 21 5-7 CL = 50 pF 
T6a SMI# valid delay 3 a ns 5-7, CL = 50 pF 
T7 A23-A1 float delay 4 5-10 Note 4 
T8 BHE#, BLE#, LOCK# valid delay 2.5 18 5-7, 5-10 CL = 50 pF 
T9 BHE#, BLE#, LOCK# float delay 4 30 5-10 Note 4 
T10 ADS#, D/C#, M/lO#, W/R# valid delay 4 19 5-7, 5-10 CL = 50 pF 
T10a_ | SMADS# valid delay 4 19 5-7,5-10 CL = 50 pF 
T11 ADS#, D/C#, M/lO#, W/R# float delay 4 30 5-10 Note 4 
T11a | SMADS# float delay 4 30 5-10 Note 4 
T12 D15—D0 write data, SUSPA# valid delay 35 5-7 CL = 50 pF, 
T1i2a | D15—D0 write data hold time 2 ns 5-9 Note 5 
T13 D15—D0 write data, SUSPA# float delay 4 22 5-10 Notes 4, 6 
T14 HDLA valid delay 2 22 ns 5-10 CL = 50 pF 
T15 NA#, SUSP#, FLUSH#, KEN#, A20M# setup time 5 5-6 
T16 NA#, SUSP#, FLUSH#, KEN#, A20M# hold time 3.5 5-6 
T19 READY# setup time 9 5-6 
T20 READY# hold time 4 5-6 
T21 D15—D0 read data setup time 7 5-6 
T22 D15—D0 read data hold time 5 5-6 
T23 HOLD setup time 9 5-6 
T24 HOLD hold time 3.5 5-6 
T25 RESET setup time 8 5-5 
T26 RESET hold time 3 5-5 Note 5 
T27 NMI, INTR setup time 6 5-6 Note 7 
T27a_| SMi# setup time 6 fe 5-6 Note 7 
T28 NMI, INTR hold time 6 5-6 Note 7 
T28a_ | SMI# hold time 6 5-6 Note 7 
T29 PEREQ, ERROR#, BUSY# setup time 6 5-6 Note 7 
T30 PEREQ, ERROR#, BUSY# hold time 5 5-6 Note 7 

Notes: Voc =3 V to 3.6 V, Tc = 0°C to 85°C 


ADVANCE INFORMATION concerns new 


preproduction 


1) 

2) Input clock can be stopped; therefore, minimum CLK2 frequency is 0 MHz. 

3) These parameters are not tested. They are determined by design characterization. 

4) Float condition occurs when maximum output current becomes less than | in magnitude. Float is not 100% tested. 

5) Not 100% tested. 

6) SUSPA# floats only in response to activation of FLT#. SUSPA# does not float during a hold acknowledge state. 

7) These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing pur- 
poses to assure recognition within a specific CLK2 period. 


products in the sampling or 
phase of development. Characteristic data and other 


specifications are subject to change without notice. 
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Table 5—20. AC Characteristics for TI486SXL-V40 (See Note 1) 


TI486SXL-V40 
Symbol Parameter Unit Notes 
CLK2 frequency range 
T1 CLK2 period Note 2 
T2a CLK2 high time Note 3 
T2b CLK2 high time Note 3 
T3a CLK2 low time Note 3 
T3b CLK2 low time Note 3 
T4 CLKk2 fall time Note 3 
T5 CLK2 rise time Note 3 
T6 A31-A2 valid delay 3 Cy = 50 pF 
T6a SMI# valid delay 3 CL = 50 pF 
T7 A31-A2 float delay 3 Note 4 
T8 BE3# — BEO#, LOCK# valid delay 3 CL = 50 pF 
T9 BE3# — BEO#, LOCK# float delay 3 Note 4 
T10 ADS#, D/C#, M/IO#, W/R# valid delay 3 CL = 50 pF 
T10a_ | SMADS# valid delay 3 CL = 50 pF 
T11 ADS#, D/C#, M/IO#, W/R# float delay 3 Note 4 
Tila | SMADS# float delay 3 Note 4 
T12 D31—D0 write data, SUSPA# valid delay 5 CL = 50 pF, 
T12a D31-—D0 write data hold time 2 Note 5 
T13 D31—D0 write data, SUSPA# float delay 3 Notes 4, 6 
714 HDLA valid delay 3 CL = 50 pF 
T15 A20M#, FLUSH#, KEN#, NA#, SUSP# setup time 5 
T16 A20M#, FLUSH#, KEN#, NA#, SUSP# hold time 2 
T17 BS16# setup time 5 
T18 BS16# hold time 2 
T19 READY# setup time 5 
T20 READY# hold time 3 
T21 D31—D0 read data setup time 5 
T22 D31-—D0 read data hold time 3 
T23 HOLD setup time 4 
T24 HOLD hold time 2 
T25 RESET setup time 4.5 a 
T26 RESET hold time 2 Note 5 
T27 NMI, INTR setup time 5 Note 7 
T27a_ | SMI# setup time 5 Ae Note 7 
T28 NMI, INTR hold time 5 Note 7 
T28a_ | SMI# hold time 5 Note 7 
T29 PEREQ, ERROR#, BUSY# setup time 5 ne Note 7 
T30 PEREQ, ERROR#, BUSY# hold time 3 Note 7 
T31 | Clock-doubled PLL lock time | | 20 us Note 8 


Notes: 
Notes: 


Voc = 3 V to 3.6 V, To = 0 to 85°C 


Input clock can be stopped; therefore, minimum CLK2 frequency is 0 MHz. 


These parameters are not tested. They are determined by design characterization. 


Not 100% tested. 


SUSPA# floats only in response to activation of FLT#. SUSPA# does not float during a hold-acknowledge state. 
These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing pur- 
poses to assure recognition within a specific CLK2 period. 

8) Delay time from setting CKD in CCRO to entering clock-doubled mode. 


ADVANCE INFORMATION concerns new products in the sampling or 
preproduction phase of development. Characteristic data and other 
specifications are subject to change without notice. 


1) 
2) 
3) 
4) Float condition occurs when maximum output current becomes less than || in magnitude. Float is not 100% tested. 
5) 
6) 
7) 
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Table 5-21. AC Characteristics for TI486SXL2-V50 (See Note 1) 


TI486SXL2-V50 
Symbol Parameter | MIN | MAX | 


ns 
Ss 


n 


CLK2 clock-doubled frequency range 32 50 
T1 CLK2 period 20 5-4 Note 2 
T2a CLK2 high time 7 5-4 Note 3 
T2b CLK2 high time 4 5-4 Note 3 
T3a CLK2 low time 7 5-4 Note 3 
T3b CLK2 low time 5 5-4 Note 3 
T4 CLK2 fall time 7 5-4 Note 3 
T5 CLK2 rise time 7 5-4 Note 3 
T6 A31—A2 valid delay 3 21 5-12 Cy. = 50 pF 
T6a SMI# valid delay 3 30 5-12 CL = 50 pF 
T7 A31—A2 float delay 4 30 5-15 Note 4 
T8 BE3# — BEO#, LOCK# valid delay 2.5 18 5-12 CL = 50 pF 
T9 BE3# — BEO#, LOCK# float delay 4 30 5-15 Note 4 
T10 ADS#, D/C#, M/IO#, W/R# valid delay 4 19 5-12, 5-15 | CL = 50 pF 
T10a SMADS# valid delay 4 19 5-12, 5-15 | CL = 50 pF 
5 
5 


T11 ADS#, D/C#, M/IO#, W/R# float delay 
Tila SMADS# float delay 


an 
ak ok 
Zz 
foe) 
= 
ORO) 
AB 


T12 D31—D0 write data, SUSPA# valid delay CL = 50 pF, 
T12a D31-D0 write data hold time Note 5 

T13 D31—D0 write data, SUSPA# float delay Notes 4, 6 
714 HDLA valid delay CL = 50 pF 


T15 A20M#, FLUSH#, KEN#, NA#, SUSP# setup time 
T16 A20M#, FLUSH#, KEN#, NA#, SUSP# hold time 
T17 BS16# setup time 

T18 BS16# hold time 

T19 READY# setup time 

T20 READY# hold time 


T21 D31-D0 read data setup time 
T22 D31-D0 read data hold time 


T23 HOLD setup time 
T24 HOLD hold time 


T25 RESET setup time 
T26 RESET hold time 


T27 NMI, INTR setup time 
T27a SMI# setup time 

T28 NMI, INTR hold time 
T28a SMI# hold time 


T29 PEREQ, ERROR#, BUSY# setup time 
T30 PEREQ, ERROR#, BUSY# hold time 
T31 Clock-doubled PLL lock time 


Notes: Voc =3 V to 3.6 V, Tc = 0 to 85°C 
Input clock can be stopped; therefore, minimum CLK2 frequency is 0 MHz. 


(oe) (oe) (oe) 
No ee) hm] wo 
oO PhO} Ph NN] Oo 


These parameters are not tested. They are determined by design characterization. 


Not 100% tested. 
SUSPA# floats only in response to activation of FLT#. SUSPA# does not float 


during a hold-acknowledge state. 


1) 
2) 
3) 
4) Float condition occurs when maximum output current becomes less than I in magnitude. Float is not 100% tested. 
5) 
6) 
7) 


These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing pur- 


poses to assure recognition within a specific CLK2 period. 
8) Delay time from setting CKD in CCRO to entering clock-doubled mode. 


ADVANCE INFORMATION concerns new products in the sampling or 


preproduction phase 


of development. Characteristic data and other 


specifications are subject to change without notice. 


5-24 


5.5.3.3 AC Data for 5-Volt Microprocessors 


Table 5—22. AC Characteristics for TIA86SXLC-040 (See Note 1) 


TI486SXLC-040 


Table 5-22 covers the 5-V 40, 20 MHz TI486SXLC-040. 


AC Characteristics 


Table 5-23 on page 5-26 covers the 5-V 50 MHz Tl486SXLC2-050. 


Table 5-24 on page 5-27 covers the 5-V 40, 20 MHz TI486SXL-040. 


Table 5-25 on page 5-28 covers the 5-V 50 MHz TIl486SXL2-050 


fa leaanel Notes 


Symbol Parameter MIN MAX 
CLK2 frequency range 32 40 MHz 
T1 CLK2 period 5-4 Note 2 
T2a CLK2 high time 5-4 Note 3 
T2b CLK2 high time 5-4 Note 3 
T3a CLK2 low time 5-4 Note 3 
T3b CLK2 low time 5-4 Note 3 
T4 CLK2 fall time 5-4 Note 3 
T5 CLK2 rise time 5-4 Note 3 
T6 A23-A1 valid delay 3 5-7 CL = 50 pF 
T6a SMI# valid delay 3 5-7, CL = 50 pF 
T7 A23-A1 float delay 3 5-10 Note 4 
T8 BHE#, BLE#, LOCK# valid delay 3 5-7, Cy. = 50 pF 
T9 BHE#, BLE#, LOCK# float delay 3 5-10 Note 4 
T10 ADS#, D/C#, M/IO#, W/R# valid delay 3 5-7 CL = 50 pF 
T10a_ | SMADS# valid delay 3 5-7 CL = 50 pF 
T11 ADS#, D/C#, M/IO#, W/R# float delay 3 5 Note 4 
Tila SMADS# float delay 3 5 Note 4 
T12 D15—D0 write data, SUSPA# valid delay 5 5-7 CL = 50 pF, 
T12a D15—D0 write data hold time 2 5-9 Note 5 
T13 D15—D0 write data, SUSPA# float delay 3 5-10 Notes 4, 6 
114 HDLA valid delay 3 17 ns | 5-10 Cy. = 50 pF 
T15 NA#, SUSP#, FLUSH#, KEN#, A20M# setup time 5 fe 5-6 
T16 NA#, SUSP#, FLUSH#, KEN#, A20M# hold time 2 5-6 
T19 READY# setup time 5 5-6 
T20 READY# hold time 3 5-6 
T21 D15-—D0 read data setup time 5 5-6 
T22 D15—D0 read data hold time 3 5-6 
T23 HOLD setup time 4 5-6 
T24 HOLD hold time 2 5-6 
T25 RESET setup time 4.5 5-5 
T26 RESET hold time 2 5-5 Note 5 
T27 NMI, INTR setup time 5 5-6 Note 7 
T27a__| SMI# setup time 5 5-6 Note 7 
T28 NMI, INTR hold time 5 5-6 Note 7 
T28a__| SMl# hold time 5 5-6 Note 7 
T29 PEREQ, ERROR#, BUSY# setup time 5 5-6 Note 7 
T30 PEREQ, ERROR#, BUSY# hold time 3 5-6 Note 7 
T31 | Clock-doubled PLL lock time Note 8 
Notes: 1) Vcc =4.75 V to 5.25 V, To = 0 to 100°C 

2) Input clock can be stopped; therefore, minimum CLK2 frequency is 0 MHz. 

3) These parameters are not tested. They are determined by design characterization. 

4) Float condition occurs when maximum output current becomes less than || in magnitude. Float is not 100% tested. 

5) Not 100% tested. 

6) SUSPA# floats only in response to activation of FLT#. SUSPA# does not float during a hold acknowledge state. 

7) These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing pur- 


poses to assure recognition within a specific CLK2 period. 
8) Delay time from setting CKD in CCRO to entering clock-doubled mode. 


ADVANCE INFORMATION concerns new products in the sampling or 
preproduction phase of development. Characteristic data and other 
specifications are subject to change without notice. 
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AC Characteristics 


Table 5-23. AC Characteristics for Tl486SXLC2-050 (See Note 1) 


TI486SXLC2-050 
Symbol Parameter MIN MAX Unit Figure Notes 
CLK2 clock-doubled frequency range 50 MHz 
T1 CLk2 period 5-4 Note 2 
T2a CLK2 high time 5-4 Note 3 
T2b CLK2 high time 5-4 Note 3 
T3a CLk2 low time ns 5-4 Note 3 
T3b CLK2 low time 5-4 Note 3 
T4 CLKk2 fall time 7 5-4 Note 3 
T5 CLK2 rise time 7 5-4 Note 3 
T6 A23-A1 valid delay 4 21 5-7,5-10 | C, =50 pF 
Téa SMI# valid delay 4 30 ns 5-7,5-10 | CL =50 pF 
T7 A23-A1 float delay 4 30 5-10 Note 4 
T8 BHE#, BLE#, LOCK# valid delay 4 21 nis 5-7,5-10 | CL =50 pF 
T9 BHE#, BLE#, LOCK# float delay 4 30 5-10 Note 4 
T10 ADS#, D/C#, M/lO#, W/R# valid delay 4 21 5-7,5-10 | C, =50 pF 
T10a_| SMADS¢# valid delay 4 21 MNS 15-7,5-10 | CL =50 pF 
T11 ADS#, D/C#, M/lO#, W/R# float delay 4 30 5-10 Note 4 
Tita | SMADS¢# float delay 4 30 ns | 5-10 Note 4 
T12 D15—D0 write data, SUSPA# valid delay ve 27 5-7, 5-8 CL = 50 pF, 
T12a_ | D15—D0 write data hold time 2 ns 5-9 Note 5 
T13 D15—D0 write data, SUSPA# float delay 4 22 5-10 Notes 4, 6 
T14 HDLA valid delay 4 22 ns 5-10 CL = 50 pF 
T15 NA#, SUSP#, FLUSH#, KEN#, A20M# setup time 5 ns 5-6 
T16 NA#, SUSP#, FLUSH#, KEN#, A20M# hold time 3 5-6 
T19 READY# setup time 9 ns 5-6 
T20 READY# hold time 4 5-6 
T21 D15—D0 read data setup time 7 ns 5-6 
T22 D15—D0 read data hold time 5 5-6 
T23 HOLD setup time 9 a 5-6 
T24 HOLD hold time 3 5-6 
T25 RESET setup time 8 he 5-5 
T26 RESET hold time 3 5-5 Note 5 
T27 NMI, INTR setup time 6 5-6 Note 7 
T27a_ | SMI# setup time 6 - 5-6 Note 7 
T28 NMI, INTR hold time 6 7 5-6 Note 7 
T28a_ | SMI# hold time 6 5-6 Note 7 
T29 PEREQ, ERROR#, BUSY# setup time 6 His 5-6 Note 7 
T30 PEREQ, ERROR#, BUSY# hold time 5 5-6 Note 7 
T31 Clock-doubled PLL lock time 20 us Note 8 
Notes: Voc = 4.75 V to 5.25 V, Tc = 0 to 100 °C 


1) 

2) Input clock can be stopped; therefore, minimum CLK2 frequency is 0 MHz. 

3) These parameters are not tested. They are determined by design characterization. 

4) Float condition occurs when maximum output current becomes less than || in magnitude. Float is not 100% tested. 

5) Not 100% tested. 

6) SUSPA# floats only in response to activation of FLT#. SUSPA# does not float during a hold acknowledge state. 

7) These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing pur- 
poses to assure recognition within a specific CLK2 period. 

8) Delay time from setting CKD in CCRO to entering clock-doubled mode. 


ADVANCE INFORMATION concerns new products in the sampling or 
preproduction phase of development. Characteristic data and other 
specifications are subject to change without notice. 
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AC Characteristics 


Table 5—24. AC Characteristics for TI486SXL-040 (See Note 1) 


TI486SXL-040 
Symbol Parameter Unit Notes 
CLK2 frequency range 
T1 CLK2 period Note 2 
T2a CLK2 high time Note 3 
T2b CLK2 high time Note 3 
T3a CLK2 low time Note 3 
T3b CLK2 low time Note 3 
T4 CLKk2 fall time Note 3 
T5 CLK2 rise time Note 3 
T6 A31-A2 valid delay 3 Cy = 50 pF 
T6a SMI# valid delay 3 CL = 50 pF 
T7 A31-A2 float delay 3 Note 4 
T8 BE3# — BEO#, LOCK# valid delay 3 CL = 50 pF 
T9 BE3# — BEO#, LOCK# float delay 3 Note 4 
T10 ADS#, D/C#, M/IO#, W/R# valid delay 3 CL = 50 pF 
T10a_ | SMADS# valid delay 3 CL = 50 pF 
T11 ADS#, D/C#, M/IO#, W/R# float delay 3 Note 4 
Tila | SMADS# float delay 3 Note 4 
T12 D31—D0 write data, SUSPA# valid delay 5 CL = 50 pF, 
T12a D31-—D0 write data hold time 2 Note 5 
T13 D31—D0 write data, SUSPA# float delay 3 Notes 4, 6 
714 HDLA valid delay 3 CL = 50 pF 
T15 A20M#, FLUSH#, KEN#, NA#, SUSP# setup time 5 
T16 A20M#, FLUSH#, KEN#, NA#, SUSP# hold time 2 
T17 BS16# setup time 5 
T18 BS16# hold time 2 
T19 READY# setup time 5 
T20 READY# hold time 3 
T21 D31—D0 read data setup time 5 
T22 D31-—D0 read data hold time 3 
T23 HOLD setup time 4 
T24 HOLD hold time 2 
T25 RESET setup time 4.5 a 
T26 RESET hold time 2 Note 5 
T27 NMI, INTR setup time 5 Note 7 
T27a_ | SMI# setup time 5 Ae Note 7 
T28 NMI, INTR hold time 5 Note 7 
T28a_ | SMI# hold time 5 Note 7 
T29 PEREQ, ERROR#, BUSY# setup time 5 ne Note 7 
T30 PEREQ, ERROR#, BUSY# hold time 3 Note 7 
T31 | Clock-doubled PLL lock time | | 20 us Note 8 


Notes: 1) Voc =4.75 V to 5.25 V, for Tc see Table 5-6 

2) Input clock can be stopped; therefore, minimum CLK2 frequency is 0 MHz. 

3) These parameters are not tested. They are determined by design characterization. 

4) Float condition occurs when maximum output current becomes less than || in magnitude. Float is not 100% tested. 

5) Not 100% tested. 

6) SUSPA# floats only in response to activation of FLT#. SUSPA# does not float during a hold-acknowledge state. 

7) These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing pur- 
poses to assure recognition within a specific CLK2 period. 

8) Delay time from setting CKD in CCRO to entering clock-doubled mode. 


ADVANCE INFORMATION concerns new products in the sampling or 
preproduction phase of development. Characteristic data and other 
specifications are subject to change without notice. 
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Table 5-25. AC Characteristics for TI486SXL2-050 (See Note 1) 


TI486SXL2-050 
Symbol Parameter | MIN | MAX | 


ns 
Ss 


n 


CLK2 clock-doubled frequency range 32 50 
T1 CLK2 period 20 5-4 Note 2 
T2a CLK2 high time 7 5-4 Note 3 
T2b CLK2 high time 4 5-4 Note 3 
T3a CLK2 low time 7 5-4 Note 3 
T3b CLK2 low time 5 5-4 Note 3 
T4 CLK2 fall time 7 5-4 Note 3 
T5 CLK2 rise time 7 5-4 Note 3 
T6 A31—A2 valid delay 3 21 5-12 Cy. = 50 pF 
T6a SMI# valid delay 3 30 5-12 CL = 50 pF 
T7 A31—A2 float delay 4 30 5-15 Note 4 
T8 BE3# — BEO#, LOCK# valid delay 2.5 18 5-12 CL = 50 pF 
T9 BE3# — BEO#, LOCK# float delay 4 30 5-15 Note 4 
T10 ADS#, D/C#, M/IO#, W/R# valid delay 4 19 5-12, 5-15 | CL = 50 pF 
T10a SMADS# valid delay 4 19 5-12, 5-15 | CL = 50 pF 
5 
5 


T11 ADS#, D/C#, M/IO#, W/R# float delay 
Tila SMADS# float delay 


an 
ak ok 
Zz 
foe) 
= 
ORO) 
AB 


T12 D31—D0 write data, SUSPA# valid delay CL = 50 pF, 
T12a D31-D0 write data hold time Note 5 

T13 D31—D0 write data, SUSPA# float delay Notes 4, 6 
714 HDLA valid delay CL = 50 pF 


T15 A20M#, FLUSH#, KEN#, NA#, SUSP# setup time 
T16 A20M#, FLUSH#, KEN#, NA#, SUSP# hold time 
T17 BS16# setup time 

T18 BS16# hold time 

T19 READY# setup time 

T20 READY# hold time 


T21 D31-D0 read data setup time 
T22 D31-D0 read data hold time 


T23 HOLD setup time 
T24 HOLD hold time 


T25 RESET setup time 
T26 RESET hold time 


T27 NMI, INTR setup time 
T27a SMI# setup time 

T28 NMI, INTR hold time 
T28a SMI# hold time 


T29 PEREQ, ERROR#, BUSY# setup time 
T30 PEREQ, ERROR#, BUSY# hold time 
T31 Clock-doubled PLL lock time 


Notes: Voc = 4.75 V to 5.25 V, for Tc see Table 5-6 
Input clock can be stopped; therefore, minimum CLK2 frequency is 0 MHz. 


(oe) (oe) (oe) 
No ee) hm] wo 
oO PhO} Ph NN] Oo 


These parameters are not tested. They are determined by design characterization. 


Not 100% tested. 
SUSPA# floats only in response to activation of FLT#. SUSPA# does not float 


during a hold-acknowledge state. 


1) 
2) 
3) 
4) Float condition occurs when maximum output current becomes less than || in magnitude. Float is not 100% tested. 
5) 
6) 
7) 


These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing pur- 


poses to assure recognition within a specific CLK2 period. 
8) Delay time from setting CKD in CCRO to entering clock-doubled mode. 


ADVANCE INFORMATI 
preproduction phase 


ION concerns new products in the sampling or 
of development. Characteristic data and other 


specifications are subject to change without notice. 
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5.5.4 RESET Setup and Hold Timing 


RESET setup and hold timing for the Tl486SXL(C) family of microprocessors 
are illustrated in Figure 5—5. 


Figure 5-5. RESET Setup and Hold Timing 


Reset pid Initialization Sequence 
1 or p2 | 


CLK2 


5.5.5 TI486SXLC Switching Waveforms 


Switching waveforms for the Tl486SXLC microprocessors are illustrated in 
Figure 5-6, Figure 5—7, Figure 5—8, Figure 5-9, and Figure 5-10 on pages 
5-29 through 5-31. 


Figure 5-6. TI486SXLC Input Signal Setup and Hold Timing 
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ADVANCE INFORMATION concerns new products in the sampling or 
preproduction phase of development. Characteristic data and other 
specifications are subject to change without notice. 
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Figure 5—7. TI486SXLC Output Signal Valid Delay Timing 
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Figure 5-8. TI486SXLC Data Write Cycle Valid Delay Timing 
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Figure 5-9. TI486SXLC Data Write Cycle Hold Timing 
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W/R# \ Valid n+1 


Ti2a —¢) 


| Min 


D15—D0 Valid n J) Valid n+1 


Figure 5-10. Tl486SXLC Output Signal Float Delay and HLDA Valid 


Delay Timing 


Ti or T1 


Max Min Max 
. |Min . Max 
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5.5.6 TI486SXL Switching Waveforms 
Switching waveforms for the Tl486SXL microprocessors are illustrated in 
Figure 5-11, Figure 5—12, Figure 5-13, Figure 5-14, and Figure 5-15 on 
pages 5-32 through 5-34. 

Figure 5—11. Tl486SXL Input Signal Setup and Hold Timing 
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Figure 5-12. Tl486SXL Output Signal Valid Delay Timing 
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Figure 5-13. Tl486SXL Data Write Cycle Valid Delay Timing 
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Figure 5-14. Tl486SXL Data Write Cycle Hold Timing 
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Figure 5—15. Tl486SXL Output Signal Float Delay and HLDA Valid Delay Timing 
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Chapter 6 


Mechanical Specifications 


Mechanical specifications include pin assignments, package dimensions, and 
thermal characteristics for each of the TlI486SXL(C) microprocessors. 


The Tl486SXL(C) microprocessors are supplied in the following packages: 
100-pin, thermally enhanced plastic quad flat package 


132-pin, ceramic pin grid array package 


144-pin, ceramic quad flat package 


a 
a 
Lj 144-pin, thermally enhanced plastic quad flat package 
a) 
a) 


168-pin, ceramic pin grid array package 


Pin assignments provide both a pin locator drawing and two pin listings. One 
pin listing is alphabetically by pin name and the other is (alpha)numerically by 
pin number. 


A pinout cross-reference, comparing industry-standard 486SX pinouts, is sup- 
plied for the 168-pin package at the end of the pin-assignment data. 


Industry-standard dimensioned drawings are supplied for each package. 


Thermal characteristics are supplied for each package and includes airflow 
measurement setup data for correlation purposes. 
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Terminal Assignments 


6.1 Terminal Assignments 


The terminal assignments for the Tl1486SXLC microprocessors are shown in 
Figure 6—1. The signal names are shown in Table 6—1 sorted by terminal num- 
bers and in Table 6-2 sorted by signal names. 


Figure 6—1. TI486SXLC Terminal Assignments 


a Oe ano ke See CeO Or mag ARS 
ana> rSraqnanaaraqnaaar ra qnaatar> rc 
DSHMHODOROWTMNATODDOROMWYTNNrTODMDADARO 
SGHAWAMWABDAMDODWM DMM OOMOONNNN 
DO 1 nS 75 A20 
Vss 2 Terminal # 1 Index Mark 74 A19 
HLDA 3 (On Top Side) 73 A18 
HOLD 4 72 A17 
Vss 5 71 Voc 
NA# 6 70 A16 
READY# 7 69 Voc 
Vcc 8 68 Vss 
Vcc ) 67 Vss 
Vcc 10 66 A15 
Vss 11 65 A14 
Vss 12 (Top View) 64 A13 
Vss 13 63 [C— > Vss 
Vss 14 62 A12 
CLK2 15 61 Att 
ADS# 16 60 A10 
BLE# 17 59 AQ 
Atl oo 18 58 A8 
BHE# 19 57 Vcc 
SMADS# <— 20 56 A7 
Vcc 21 55 AG 
Vss oo 22 54 A5 
M/lO# 23 53 A4 
D/iC# I 24 52 A3 
W/R# 25 51 A2 
OnRDDOTAMDMDTHOONRDDOrAYNTOORDD OO 
NUNNANMOYNMYMNMYNMOYOMNMONMNMOOMO ST STITT rrrt wo 
SOR SSS ON SREOSOL MOF SOX OND 
B* res Seg a> Ob aS 25985 9° GSS > 
=I zt cma co a2 


NC — Make no external connection 


Ge... os 
Note: 


Connecting or terminating (high or low) any NC terminal(s) may cause un- 


predictable results or nonperformance of the microprocessor. 
| ee 


Terminal Assignments 


Table 6—1. TlI486SXLC Signal Names Sorted by Terminal Number 


Signal Term. Signal Term. Signal . Signal 
No. Name . No. Name No. Name M Name 


1 DO Vss D15 
2 Vss Ss Voc D14 
3 HLDA SUSP# D13 
4 HOLD SUSPA# Vcc 
5 Vss Vss 
6 NA# D12 
7 READY# D114 
8 Voc D10 
9 Voc D9 


Signal Term. Signal Term. 
Name No. Name No. 


NC — Make no external connection 


= hh  — eee 
Note: 


Connecting or terminating (high or low) any NC terminal(s) may cause un- 


predictable results or nonperformance of the microprocessor. 
| | 
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The terminal assignments for the 132-pin PGA TI486SXL microprocessors 
are shown as viewed from the terminal side (bottom) in Figure 6—2 and as 
viewed from the top side (component side when mounted on a PC board) in 
Figure 6-3. The signal names are listed in Table 6-3 and Table 6-4 sorted by 
terminal number and signal name, respectively. 


Figure 6—2. 132-Pin PGA Tl486SXL Package Terminals (Bottom View) 
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NC — Make no external connection 
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Figure 6-3. 132-Pin PGA Tl486SXL Package Terminals (Top View) 
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NC — Make no external connection 


Note: 
Connecting or terminating (high or low) any NC terminal(s) may cause un- 


predictable results or nonperformance of the microprocessor. 
| ee | 


Mechanical Specifications 6-5 


Terminal Assignments 


Table 6-3. 132-Pin PGA Tl486SXL Signal Names Sorted by Terminal Number 


Term. Signal Signal Signal . Signal 2 . Signal 
No. Name . Name i Name . 2 . Name 
Al Voc Voc 
A2 Vss D23 
A3 A3 D21 
A4 SUSP# D17 
A5 Voc D16 
A6 Vss D12 
A7 Voc D11 
A8 ERROR# D9 
AQ Vss A30 
A10 Voc Voc 
Alt D/C# D30 
Ai2 M/lO# D29 
A13 BE3# D26 
A14 Voc Vss 
B1 Vss D24 
B2 AS Voc 
B3 A4 D22 
B4 SUSPA# D19 
B5 Vss D18 
B6 NC CC D14 
B7 INTR READY# D13 
B8 NMI Voc Vss 

NC — Make no external connection 
Table 6-4. 132-Pin PGA Tl486SXL Terminal Numbers Sorted by Signal Name 

Signal Term. | Signal Term. | Signal Term. | Signal Term. | Signal Term. i Term. 

Name No. Name No. Name No. Name No. Name No. No. 

A2 C4 A2 

A3 A3 A6 

A4 B3 AQ 

AS B2 B1 

A6 C3 B5 

A7 C2 B11 

A8 C1 B14 

AQ D3 C11 

A10 D2 F2 

Alt D1 F3 

Ai2 E3 F14 

A13 E2 J2 

A14 Ef J3 

A15 F1 J12 

A16 G1 J13 

A17 H1 M4 

A18 H2 M8 

A19 H3 M10 

A20 J1 N3 

A20M# F13 P6 

A21 K1 P14 

A22 K2 B10 


NC — Make no external connection 


co 
Note: 


Connecting or terminating (high or low) any NC terminal(s) may cause un- 


predictable results or nonperformance of the microprocessor. 
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Terminal Assignments 


The terminal assignments for the 144-pin, QFP TI486SXL microprocessors 
are shown as viewed from the top side (component side when mounted on a 
PC board) in Figure 6-4. The signal names are listed in Table 6-5 and 
Table 6-6 sorted by terminal number and signal name, respectively. 


Figure 6-4. 144-Pin QFP Tl486SXL Package Terminals (Top View) 


TI486SXL 


Terminal # 1 Index Mark 
(On Top Side) 


NC — Make no external connection 
t This pin is Vocs for the TI486SXL-G40 and TI486SXL2-G50. It is NC for all other devices. 
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Table 6-5. 144-Pin QFP Tl486SXL Signal Names Sorted by Terminal Number 


Term. Signal Term 
No. Name No. 
1 DO 25 
2 Vss 26 
3 D24 27 
4 D25 28 
5 Voc 29 
6 HLDA 30 
7 HOLD 31 
8 Vss 32 
9 NA# 33 
10 READY# 34 
11 Vcc 35 
12 -D28 36 
13 D29 37 
14-30 38 
15-31 39 
16 Voc 40 
17 Voc 41 
18 = Vgs 42 
19 Vss 43 
20 vgs 44 
21 Vss 45 
22 Vss 46 
23° ~Vss 47 
24 Vss 48 


Signal 
Name 


CLK2 
ADS# 
BEO# 
BE1# 
SMADS# 
Voc 
BE2# 
BE3# 


NC — Make no external connection 
t This pin is Vocs for the TI486SXL-G40 and TI486SXL2-G50. It is NC for all other devices. 


Table 6-6. 144-Pin QFP Tl486SXL Terminal Numbers Sorted by Signal Name 


Signal Term. 
Name No. 
A2 73 
A3 74 
A4 75 
A5 76 
A6 77 
A7 78 
A8 86 
AQ 87 
A10 88 
Alt 89 
A12 90 
A13 93 
A14 94 
A15 95 
A16 104 
A17 106 
A18 107 
A19 108 
A20 109 
A20M# 43 
A21 110 
A22 113 
A23 114 
A24 61 


59 
58 
84 
83 
82 
81 


NC — Make no external connection 
t This pin is Vos for the TI486SXL-G40 and TI486SXL2-G50. It is NC for all other devices. 


Signal Term. Signal | Term. Signal Term. 
Name No. Name No. Name No. 
ERROR# 73 A2 97 Vss 121 
PEREQ 74 A3 98 Vcc 122 
NMI 75 A4 99 D23 123 
Voc 76 A5 100 D22 124 
INTR 77 A6 101 D21 125 
Vss 78 A7 102 D20 126 
Voc 79 Voc 103 Voc 127 
Voc 80 Vss 104 A116 128 
Vss 81 A311 105 Voc 129 
A27 82 A30 106 A17 130 
A26 83 A29 107. A18 131 
A25 84 A28 108 <A19 132 
A24 85 Vcc 109 A20 133 
Voc 86 A8 110 3=A21 134 
SUSP# 87 AQ 111 Vss 135 
SUSPA# 88 A10 112 Vss 136 
NC 89 Alt 113 A22 137 
MEMW# 90 Ai2 114. A238 138 
SMl# 91 Vcc 115 BS16# 139 
Voc 92 Vss 116 D15 140 
Vss 93 A13 117. D14 141 
Vss 94 A14 118 D13 142 
NC 95 A15 119 Voc 143 
Vss 96 Vss 120 Vss 144 


131 


Signal Term. | Signal Term. | Signal Term. | Signal Term. | Signal 
Name No. | Name No. Name No. | Name No. 
60 D8 49 5 


ERROR# 
FLT# 
FLUSH# 
HLDA 
HOLD 
INTR 
KEN# 


NC/Vccst 
NC 


NC 

NC 
PEREQ 
READY# 
RESET 
SMI# 
SMADS# 
SUSP# 
SUSPA# 


Term. 
No. 


SSS | 


Note: 


Connecting or terminating (high or low) any NC terminal(s) may cause un- 


predictable results or nonperformance of the microprocessor. 
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The terminal assignments for the 168-pin, PGA TI486SXL microprocessors 
are shown as viewed from the terminal side (bottom) in Figure 6—5 and as 
viewed from the top side (component side when mounted on a PC board) in 
Figure 6-6. The signal names are listed in Table 6—7 and Table 6—8 sorted by 
terminal number and signal name, respectively. In addition, Table 6-9 shows 
a cross-reference between the 168-pin TlI486SXL pinout and the 486SX pin- 
out. 


Figure 6—5. 168-Pin PGA TI486SXL Package Terminals (Bottom View) 
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NC — Make no external connection 
t This pin is Vocs for the TI486SXL-G40 and TI486SXL2-G50. It is Vcc for all other devices. 
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Terminal Assignments 
Figure 6-6. 168-Pin PGA TI486SXL Package Terminals (Top View) 
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NC — Make no external connection 
t This pin is Vocs for the TI486SXL-G40 and TI486SXL2-G50. It is Vcc for all other devices. 
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Note: 


Connecting or terminating (high or low) any NC terminal(s) may cause un- 


predictable results or nonperformance of the microprocessor. 
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Table 6—7. 168-Pin PGA TIl486SXL Signal Names Sorted by Terminal Number 


Term. Signal 
No. Name 


Al D20 
A2 D22 
A3 NC 
A4 D23 
ADS NC 
A6 D24 
A7 Vss 
A8 D29 
AQ Vss 
A1i0 —_- Reserved 
Ait Vss 
A1i2 ERROR# 
A13. NA# 
A1l4. NC 
A15 NMI 
A16— INTR 
A17 NC 
B1 D19 
B2 D21 
B3 Vss 
B4 Vss 
BS Vss 
B6 D25 
B7 Voc 
B8 D31 
B9 Voc 
B10 =SMl# 
B11 Vcc 


Signal Term. 
Name No. 
A2 Q14 
A3 R15 
A4 S16 
A5 Q12 
A6 $15 
A7 Q13 
A8 R13 
AQ Q11 
A10 $13 
Alt R12 
A12 S7 
A13 Q10 
A14 $5 
A15 R7 
A16 Qg 
A17 Q3 
A18 R5 
A19 Q4 
A20 Q8 
A20M# D15 
A2t Q5 
A22 Q7 
A23 $3 
A24 Q6 
A25 R2 
A26 $2 
A27 S1 


Signal Term. 


Name No. 


NC — Make no external connection 
t This pin is Vos for the TI486SXL-G40 and TI486SXL2-G50. It is Vcc for all other devices. 


Term. Signal 
No. Name 


Term. Signal 
No. Name 


B12 SUSPA# | D17 NC 
B13. SMADS#| E1 Vgg 


B14. NC E2 Vcc 
B15. NC E3 D10 
B16 MEMW# E15 HOLD 
B17 NC E16 Voc 
C1 D111 E17 Vss 
C2 D18 F1 NC 
C3 CLK2 F2 D8 
C4 Vcc F3.  D15 
C5. Vcc Fi5 KEN# 
C6 D27 Fi6é READY# 
C7 D26 F1l7 BES# 
C8 D28 Gi Vss 
cg D30 G2 Vcc 
C10 NC G3 12 
C11 FLT# G15 NC 
C12 NC G16 Voc 
C13. SUSP# G17 Vss 
C14. NC Hi Vsg 
C15 FLUSH# H2 D3 
Ci6é RESET H3 NC 
C17 = BS 16# H15 NC 

Di D9 H16 Vcc 
D213 H17 Vgg 
D3. s«~DI7 Jt Vocyst) 
Di5  A20M# J2 D5 
D16 NC J3 D16 


Signal Term. 
Name No. 
D16 J3 
D17 D3 
D18 C2 
D19 B1 
D20 Al 
D21 B2 
D22 A2 
D23 A4 
D24 A6 
D25 B6 
D26 C7 
D27 C6 
D28 C8 
D29 A8 
D30 cg 
D31 B8 
ERROR# A12 
FLT# C11 
FLUSH# C15 
HLDA P15 
HOLD E15 
INTR A16 
KEN# F15 
LOCK# N15 
M/lO# N16 
MEMW# B16 
NA# A13 
NMI A15 


Term. 
No. 


Reserved 
RESET 
SMI# 


Signal Term. Signal | Term. Signal 
Name No. Name No. Name 
R7 = A15 
R8 Vcc 
R9 —~Vcoc 
R10 Vcc 
R11 =Vcc 
R12 Att 
R13 A8& 
R14. Voc 
R15 A3 
R16 NC 
R17  PEREQ 
$1 A27 
$2. A26 
$3. A23 
S4. BUSY# 
S5 = A14 
S6 Vss 
S7 A12 
S8 Vss 
S9 Vss 
$10 Vss 
S11 Vss 
$12 Vss 
$13. A10 
$14. VSS 
S15 A6 
S16 A4 
S17. ADS# 
Term. | Signal Term. | Signal Term. 
No. | Name No. | Name No. 
A3 SMADS# = B13 | Vssg AQ 
AS SUSP# C13 | Vss Alt 
A14_ | SUSPA# B12 |Vss B3 
A17 |Vcoc B7 Vss B4 
B14. |Vcc B9 Vss BS 
B15 |Vcc B11 Vss E1 
B17 |Vcc C4 | Vss E17 
C10 |Vcc C5 |Vss G1 
Ci2 |Vcc E2 Vss G17 
C14 |Vcc E16 |Vss H1 
D1i6 |VCc G2 |Vss H17 
D17 cC G16 ss K1 
FA Voc H1i6 | Vss K17 
G15 | Vec(st) Jt Vss L1 
H3 Voc K2 Vss L17 
H15 |Vcc K1i6 | Vss M1 
J17 -|Voc Li6é |Vss M17 
L15 |Vcc M2 |Vss P17 
N3 Vcc M16 |Vss Q2 
Q15 CC P16 ss R4 
Q16 | Voc R3 | Vss S6 
Q17_ |Voc R6 |Vss S8 
R16 | Vcc R8 |Vss S9 
R17 |Vcoc RQ | Vss $10 
F16 |Vcc R10 |Vss $11 
A10 | Voc R11 | Vss $12 
C16 |Vcc R14 |Vs $14 
B10 |Vss A7 W/R# N17 
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VIS ‘21S 
LES ‘OLS 
6S ‘8S 
9S ‘vu 
20 ‘Lhd 
ZLW ‘LA 
ZbV‘H 
LLM“ 
ZtH ‘+H 
ZED ‘LS 
Zt ‘13 
ca ‘va 
ed ‘bLW 
6V ‘LV 


vd ‘bY 


uld 
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Package Dimensions 


6.2 Package Dimensions 


Figure 6-7 shows the package dimensions for the 100-pin TI486SXLC 
microprocessor. 


Figure 6-8 shows the package dimensions for the132-pin PGA TI486SXL. 


Figure 6—9 and Figure 6-10 show the package dimensions for the 144-pin 
QFP TI486SXL. 


Figure 6-11 shows the package dimensions for the 168-pin PGA TI486SXL. 


Figure 6—7. 100-Pin Thermally Enhanced Plastic QFP Package Dimensions (Tl486SXLC) 
PJF(S-PQFP-G100) PLASTIC QUAD FLATPACK 
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4040093/A 10/93 


NOTES: A. All linear dimensions are in inches (millimeters). 
B. This drawing is subject to change without notice. 
C. Falls within JEDEC MO-069 
D. Thermally enhanced molded plastic package with a heat slug (HSL) exposed on bottom side of the package body. 
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Figure 6—8. 132-Pin Ceramic PGA Package Dimensions (Tl486SXL) 
CPGA-132 PIN CERAMIC PIN GRID ARRAY 
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NOTES: E. All linear dimensions are in millimeters (inches). 
F. This drawing is subject to change without notice. 


Package Dimensions 


Figure 6-9. 144-Pin Plastic QFP Dimensions (Tl486SXL) 


PCE(S-PQFP-G144) PLASTIC QUAD FLATPACK 


0,16 TYP 


1 
l¢— 22,75 SQ TYP 


28 co 
: 31,45 sa 
30,95 


0,25 MIN 
Seating plane 
. , 
Sf Seating Plane 
t 4,10 MAX 


S| (0,10) 


NOTES: A. All linear dimensions are in millimeters. 

This drawing is subject to change without notice. 

Falls within JEDEC MS-022 

Thermally enhanced molded plastic package with a heat spreader (HSP) 


Foot length is measured from lead tip to a position on backside of lead 0,25mm above seating plane (gage plane). 
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Figure 6-10. 144-Pin Ceramic QFP Dimensions (Tl486SXL) 
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NOTES: A. All linear dimensions are in millimeters. 
B. This drawing is subject to change without notice. 
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Package Dimensions 


Figure 6-11. 168-Pin Ceramic PGA Package Dimensions (Tl486SXL) 
CPGA-168 PIN CERAMIC PIN GRID ARRAY 
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NOTES: A. All linear dimensions are in millimeters (inches). 
B. This drawing is subject to change without notice. 
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6.3 Thermal Characteristics 


The junction-to-ambient (typical) values vary for individual applications. Tha 
variance depends on the following factors: 


(1 Circuit trace density of the printed circuit board (PCB) and/or the presence 
or absence of ground or power planes internal to the PCB. These factors 
affect the conduction of heat away from the device. 


1 Whether the device is soldered to the PCB or is inserted into a socket 


[J Orientation of the PCB that the device is mounted on and the proximity of 
adjacent PCBs or system enclosure. These factors impede the natural 
convection air circulation around the device. 


Lj Ambient air temperature in close proximity to the device and the proximity 
of other high-power devices in the system 


_j Presence of airflow over the device and the attachment of an external heat 
sink as indicated by the data in Table 6-10 and Table 6-11 


For the 100-pin and 144-pin QFPs, the values shown for thermal resistance 
in Table 6-10 and Table 6—12 with a heatsink are examples of the estimated 
improvement in thermal performance. 


Note: 


You are responsible for verifying your designs that incorporate any version 
of a TI microprocessor. Recommended case temperature extremes are 
specified in Table 5-4, Table 5-5, and Table 5-6. 


Table 6-10. TI486SXLC 100-Pin PQFP Thermal Resistance and Airflow 


TI486SXLC 100-Pin PGFP Thermal Resistance (°C/W) 


Without Heatsink With Heatsinkt 
Airflow (Ft/Min) Roc Rosa Rosa 
0 2 36 32 
100 2 32 24 
200 2 26 18 
400 2 19 14 
600 2 15 12 


tT Round, omni-directional heatsink. Dimensions are approximately 1.125 in diameter by 0.42 in 
high. 


ADVANCE INFORMATION concerns new products in the sampling or 
preproduction phase of development. Characteristic data and other 
specifications are subject to change without notice. 


Thermal Characteristics 


Table 6-11. TI486SXL 132-Pin CPGA Thermal Resistance and Airflow 


TI486SXL 132-Pin CPGATt Thermal Resistance 


(°C/W) 
Airflow (Ft/Min) Resc RoJa 
0 3 20 
100 3 17 
200 3 15 
400 3 11 
600 3 9 


t Thermal resistance values shown are based on measurements made on similar ceramic PGA 
packages. 


Table 6-12. TIA86SXL 144-Pin PQFP Thermal Resistance and Airflow 


TI486SXL 144-Pin PQFP# Thermal Resistance (°C/W) 


Without Heatsink With Heatsink$ 
Airflow (Ft/Min) Roc Rosa Roga 
0 2 25 18 
100 2 21 13 
200 2 19 9 
400 2 14 7 
600 2 12 6 


+ Values shown are based on measurements made on similar 28 mm QFP packages. 
§ Pin-Fin heatsink. Dimensions are approximately 1.2” long, by 1.3” wide, by 0.49” high. 


Table 6-13. TI4A86SXL 144-Pin CQFP Thermal Resistance and Airflow 


TI486SXL 144-Pin CQFP{ Thermal Resistance 


(°C/W) 
Airflow (Ft/Min) Reuc Roa 
0 3 33 
100 3 28 
200 3 24 


{Thermal resistance values shown are based on measurements made on similar ceramic QFP 
packages. 


ADVANCE INFORMATION concerns new products in the sampling or 
preproduction phase of development. Characteristic data and other 
specifications are subject to change without notice. 
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Table 6-14. TI486SXL 168-Pin CPGA Thermal Resistance and Airflow 


168-Pin Ceramic PGA Package Thermal Resistance 


(°C/W) 
Airflow (Ft/Min) Royc RoJa 
0 3 18 
100 3 1 
200 3 13 
400 3 10 
600 3 8 


Thermal resistance values shown are based on measurements made on similar ceramic PGA 
packages. 


6.3.1. Airflow Measurement Setup 


The wind tunnel used for airflow measurements is represented schematically 
in Figure 6-12. 


Figure 6—12. Wind Tunnel Schematic Diagram 


Device test board 
Temperature and 
anemometer-type 
airflow probe 


Wind tunnel cross-section is 6” by 6”. 


(Dimensions are approximate.) 


738” 


Typically, the devices undergoing thermal test are mounted on a test board 
consisting of 0.062” thick FR4 printed-circuit-board-material with one-ounce 
copper etch. Surface-mount devices are soldered to the test board using 
matching footprints with minimal circuit trace density required to interconnect 
the device to the board electrically. PGA devices are typically inserted in a 
socket that is soldered to the test board. 


ADVANCE INFORMATION concerns new products in the sampling or 
preproduction phase of development. Characteristic data and other 
specifications are subject to change without notice. 
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Thermal Characteristics 
6.3.2 Thermal Parameter Definitions 


The maximum die temperature (TJmax) and the maximum ambient tempera- 
ture (Tamax) can be calculated using the following equations: 


TJmax = Tc + (Pmax x Rec) 
Tamax = TJ — (Pmax x Reya)) 


where: 


TJmax = Maximum average junction temperature (°C) 
Tc = Case temperature at top center of package (°C) 
Pmax = Maximum device power dissipation (W) 

Reyc = Junction-to-case thermal resistance (°C/W) 
Tamax = Maximum ambient temperature (°C) 

Ty = Average junction temperature (°C) 

Rega = Junction-to-ambient thermal resistance (°C/W) 


Values for Reya and Rec are given in Table 6-10 and Table 6-11 for various 
airflows. 
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Chapter 7 


Instruction Set 


This chapter provides information pertaining to the Tl486SXL(C) microproces- 
sor instruction set. The information explains the general instruction format, 
fields, flags, clock-count summary, and the instruction encodings. All instruc- 
tions are listed in the instruction set in Section 7.5, Instruction Set. 
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General Instruction Format 


7.1. General Instruction Format 


All of the Tl486SXL(C) microprocessor family machine instructions follow the 
general instruction format shown in Figure 7—1. These instructions vary in 
length and can start at any byte address. 


An instruction consists of one or more bytes that can include the following: 


prefix byte(s) 

at least one opcode byte 

a mod r/m byte 

an s-i-b (ss, index, and base fields) byte 
address displacement byte(s) 
immediate data byte(s) 


UUUOUCU 


An instruction can be as short as one byte or as long as 15 bytes. If there are 
more than 15 bytes in the instruction, a general protection fault (error code of 
0) is generated. 


Figure 7—1. General Instruction Format 


PPPPPPPP|TTTTTTTT|mod RRR r/m|ss index base |d32\16|8| none id32 16|8| none 


7 07 0765320765320 

— ——_ -— ——_  —_ meer s/s SY 

optional prefix opcode mod r/m s-i-b address immediate 
byte(s) (one or two bytes) byte byte displacement data 


(4, 2, 1 bytes, (4, 2, 1 bytes, 
or none) or none) 
register- and 
address-mode 
specifier 


P — prefix bit 


T — opcode bit 
R — opcode bit or reg bit 
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Instruction Fields 


The general instruction format shows the larger fields that make up an instruc- 
tion. Certain instructions have smaller encoding fields that vary according to 
the class of operation. These fields define information such as the direction of 
the operation, the size of the displacements, register encoding, and the sign 
extension. All the fields are described in Table 7-1. Subsequent subsections 


provide greater detail. 


Table 7—1. Instruction Fields 


Field Name 
Prefix 


Opcode 


Ww 


reg 
mod t/m 
ss 
index 
base 
sreg2 
sreg3 
eee 


Address 
displacement 


Immediate data 


Description 


Specifies segment register override, address and operand size, 
repeat elements in string instruction, and LOCK# assertion 


Identifies instruction operation 

Specifies if data is byte or full size (full size is 16 or 32 bits) 
Specifies direction of data operation 

Specifies if an immediate data field must be sign-extended 
General register specifier 

Address mode specifier 

Scale factor for scaled-index-address mode 

General register to be used as index register 

General register to be used as base register 

Segment register for CS, SS, DS, and ES 

Segment register for CS, SS, DS, ES, FS, and GS 
Control-, debug-, and test-register specifier 


Address-displacement operand 


Immediate-data operand 


Number of Bits 
8 per byte 


1 or 2 bytes 
1 
1 
1 


3 
2 
2 
3 
2 
2 
3 
3 


1, 2, or 4 bytes 


1,2, or 4 bytes 


Instruction Set 


for mod, 3 for r/m 
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7.2.1. Prefixes 


Prefix bytes can be placed in front of any instruction. The prefix modifies the 
operation of the immediately following instruction only. When more than one 
prefix is used, the order is not important. There are five types of prefixes as 
follows: 


1) Segment override explicitly specifies which segment register an instruc- 
tion uses. 

2) Address size and operand size toggle between 16- and 32-bit addressing 
modes. Prefixing the instruction for operand size or address size selects 
the inverse of the current addressing mode. See a/so Section 2.1, Proces- 
sor Initialization, page 2-2. 

3) Repeat is used with a string instruction that causes the instruction to be 
repeated for each element of the string. 

4) Lock asserts the hardware LOCK# signal during execution of the instruc- 
tion. 


Table 7—2 lists the encodings for each of the available prefix bytes. The oper- 
and-size and address-size prefixes allow individual instructions to override the 
default value for operand size and effective-address size. The presence of 
these prefixes selects the opposite (nondefault) operand size and/or effective- 
address size. 


Table 7-2. Instruction Prefix Summary 


Prefix 
ES: 


CS: 

SS: 

DS: 

FS: 

GS: 

Operand size 
Address size 
LOCK 
REPNE 
REP/REPE 
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Encoding Description 
26h Override segment default, use ES for memory operand. 
2Eh Override segment default, use CS for memory operand. 
36h Override segment default, use SS for memory operand. 
3Eh Override segment default, use DS for memory operand. 
64h Override segment default, use FS for memory operand. 
65h Override segment default, use GS for memory operand. 
66h Make operand size attribute the inverse of the default. 
67h Make address size attribute the inverse of the default. 
FOh Assert LOCK# hardware signal. 
F2h Repeat the following string instruction. 
Fh Repeat the following string instruction. 


7.2.2 Opcode Field 


7.2.3 Ww Field 


Instruction Fields 


The opcode field is either one or two bytes long and specifies the operation to 
be performed by the instruction. Some operations have more than one op- 
code, each specifying a different form of the operation. Some opcodes name 
instruction groups. For example, opcode 0x80 names a group of operations 
that have an immediate operand, and a register or memory operand. The 
group opcodes use an opcode extension field of three bits in the following byte, 
called the MOD R/M byte, to resolve the operation type. Opcodes for the entire 
Tl486SXL(C) microprocessor instruction set are listed in Table 7-17 on page 
7-14. The opcodes are given in hex values unless shown within brackets ([ ]). 
Values shown in brackets are binary values. 


The 1 -bit field indicates the operand size during 16- and 32-bit data operations 
as shown in Table 7-3. 


Table 7—3. w Field Encoding 


Operand Size Operand Size 
w Field 16-Bit Data Operations 32-Bit Data Operations 
0 8 bits 8 bits 
1 16 bits 32 bits 
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7.2.4 d Field 


The d field determines which operand is taken as the source operand and 
which operand is taken as the destination as shown in Table 7—4. 


Table 7-4. d Field Encoding 


dField Direction Of Operation Source Operand Designation Operand 
0 Register — Register/Memory _ reg mod r/m or mod ss-index-base 
1 Register/Memory — Register modr/mor mod ss-index-base reg 
7.2.5 reg Field 


The reg field determines which general registers are to be used. The selected 
register is dependent on whether 16- or 32-bit operation is current and the sta- 
tus of the w bit as shown in Table 7-5. 


Table 7-5. reg Field Encoding 


16-Bit 32-Bit 
Operation Operation 16-Bit 16-Bit 32-Bit 32-Bit 
w Field Not __w Field Not Operation Operation Operation Operation 

reg Field Present Present w=0 w=1 w=0 w=1 
000 AX EAX AL AX AL EAX 
001 CX ECX CL CX CL ECX 
010 DX EDX DL DX DL EDX 
011 BX EBX BL BX BL EBX 
100 SP ESP AH SP AH ESP 
101 BP EBP CH BP CH EBP 
110 Sl ESI DH Sl DH ESI 
111 DI EDI BH DI BH EDI 
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7.2.6 mod and r/m Fields 


The mod and r/m sub-fields, which are within the mod r/m byte, select the type 
of memory addressing to be used. Some instructions use a fixed addressing 
mode (e.g., PUSH or POP) and, therefore, these fields are not present. 
Table 7-6 lists the addressing method when 16-bit addressing is used and a 
mod r/m byte is present. Some mod r/m field encodings are dependent on the 
w field and are shown in Table 7-7. 


Table 7-6. mod r/m Field Encoding 


32-Bit Address Mode 


16-Bit Address Mode With mod r/m Byte 


mod r/m With mod r/m Byte And No s-i-b Byte Present 

00 000 DS:[BX+SI] DS:[EAX] 

00 001 DS:[BX+DI] DS:[ECX] 

00 010 SSS[BP+Sl] DS:[EDX] 

00 011 SS:[BP+DI] DS:[EBX] 

00 100 DS{S]] s-i-b is present (see subsection 7.2.7) 
00 101 DS;[DI] DS:[d32] 

00 110 DS:[d16] DS{[ESI] 

00 111 DS:[BX] DS:[EDI] 

01 000 DS-[BX+Sl+d8] DS:[EAX+d8] 

01001 DS:[BX|+Dl+d8] DS:[EAX+d8] 

01 010 SS[BP+Sl+d8] DS:[EDX+d8] 

01011 SS:[BP+Dl+d8] DS:[EBX+d8] 

01 100 DS{[SI+d8] s-i-b is present (see subsection 7.2.7) 
01 101 DS[DI+d8] SS[EBP+d8] 

01 110 SS[BP+d8] DS:[ESI+d8] 

01111 DS[BX+d8] DS:[EDI+d8] 

10 000 DS:[BX+Sl+d16] DS:[EAX+d32] 

10001 DS:[BX+Dl+d16] DS:[ECX+d32] 

10010 SS[BP+Sl+d16] DS:[EDX+d32] 

10011 SS:[BP+Dl+d16] DS:[EBX+d32] 

10 100 DS[Sl+d16] s-i-b is present (see subsection 7.2.7) 
10 101 DS[Dl+d16] SS[EBP+d32] 

10 110 SS[BP+d16] DS:[ESI+d32] 

10111 DS:[BX+d16] DS:[EDI+d32] 

11 000 

11111 See Table 7—7 See Table 7-7 
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Table 7—7.mod r/m Field Encoding Dependent on w Field 
16-Bit Operation 16-Bit Operation 32-Bit Operation 32-Bit Operation 


mod r/m w=0 w=1 w=0 w=1 
11 000 AL AX AL EAX 
11 001 CL CX CL ECX 
11 010 DL DX DL EDX 
11011 BL BX BL EBX 
11 100 AH SP AH ESP 
11 101 CH BP CH EBP 
11 110 DH S| DH ESI 
11111 BH DI BH EDI 
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7.2. mod and base Fields 


In Table 7-6, the note “s-i-b is present” (for certain entries) forces the use of 
the mod and base fields as listed in Table 7-8. 


Table 7-8. mod base Field Encoding 
32-Bit Address Mode With mod r/m 


mod r/m Byte and No s-i-b Byte Present 
00 000 DS:[EAX+(scaled index)] 

00 001 DS:[ECX+(scaled index)] 

00 010 DS:[EDX+(scaled index)] 

00 011 DS:[EBX+(scaled index)] 

00 100 SS:[ESP+(scaled index)] 

00 101 DS:[EBP+(scaled index)] 

00 110 DS:[ESI+(scaled index)] 

00 111 DS:[EDI+(scaled index)] 

01 000 DS:[EAX+(scaled index)+d8] 
01 001 DS:[ECX+(scaled index)+d8] 
01010 DS:[EDX+(scaled index)+d8] 
01011 DS:[EBX+(scaled index)+d8] 
01 100 SS:[ESP+(scaled index)+d8] 
01 101 SS:[EBP+(scaled index)+d8] 
01 110 DS:[ESI+(scaled index)+d8] 
01 111 DS:[EDI+(scaled index)+d8] 
10 000 DS:[EAX+(scaled index)+d32] 
10 001 DS:[ECX+(scaled index)+d32] 
10010 DS:[EDX+(scaled index)+d32] 
10011 DS:[EBX+(scaled index)+d32] 
10 100 SS:[ESP+(scaled index)+d32] 
10 101 SS:[EBP+(scaled index)+d32] 
10 110 DS:[ESI+(scaled index)+d32] 
10 111 DS:[EDI+(scaled index)+d32] 
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7.2.8 ss Field 


The ss field (Table 7—9) specifies the scale factor used in the offset mechanism 
for address calculation. The scale factor multiplies the index value to provide 
one of the components used to calculate the offset address. 


Table 7-9. ss Field Encoding 


ss Field Scale Factor 
00 x1 
01 x2 
10 x4 
11 x8 


7.2.9 index Field 


The index field (Table 7-10) specifies the index register used by the offset 
mechanism for offset-address calculation. When no index register is used 
(index field = 00), the ss value must be 00 or the effective address is 
undefined. 


Table 7—10. index Field Encoding 


index Field Index Register 
000 EAX 
001 ECX 
010 EDX 
011 EBX 
100 none 
101 EBP 
110 ESI 
111 EDI 


7.2.10 sreg2 Field 


The sreg2 field (Table 7-11) is a two-bit field that allows one of the four 
286-type segment registers to be specified. 


Table 7-11. sreg2 Field Encoding 


Segment Register 


sreg2 Field Selected 
00 ES 
01 CS 
10 Ss 
11 DS 


Instruction Fields 


7.2.11 sreg3 Field 


The sreg3 field (Table 7—12) is a three-bit field that is similar to the sreg2 field, 
but allows use of the FS and GS segment registers. 


Table 7-12. sreg3 Field Encoding 


Segment Register 


sreg3 Field Selected 
000 ES 
001 cs 
010 Ss 
011 DS 
100 FS 
101 GS 
110 undefined 
111 undefined 


7.2.12 eee Field 


The eee field is used to select the control, debug, and test registers as indi- 
cated in Table 7-13. The values shown are the only valid encodings for the eee 
bits. 


Table 7—13.eee Field Encoding 


eee Field Register Type Base Register 
000 Control register CRO 
010 Control register CR2 
011 Control register CR3 
000 Debug register DRO 
001 Debug register DRI1 
010 Debug register DR2 
011 Debug register DR3 
110 Debug register DR6 
111 Debug register DR7 
011 Test register TR3 
100 Test register TR4 
101 Test register TR5 
110 Test register TR6 
111 Test register TR7 
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7.3 Flags 


The instruction set summary table lists nine flags that instruction execution af- 
fects. The conventions shown in Table 7-14 identify the different flags. 
Table 7-15 lists the conventions used to indicate what action the instruction 


has on the particular flag. 


Table 7-14. Flag Abbreviations 


Abbreviation 
OF 


Table 7—15.Action of Instruction on Flag 


Instruction Table 


Symbol 


m 
U 


0 
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Name of Flag 


Overflow flag 
Direction flag 
Interrupt enable flag 
Trap flag 

Sign flag 

Zero flag 

Auxiliary flag 

Parity flag 

Carry flag 


Action 


Flag is modified by the instruction 
Flag is not changed by the instruction 
Flag is reset to 0 


Flag is set to 1 


Clock Count Summary / Instruction Set 


7.4 Clock-Count Summary 


7.4.1 


The instruction clock-count values presented in Table 7-17 are based on as- 
sumptions associated with each individual instruction. Abbreviations indicate 
the clock-count conditions to simplify the presentation. 


Assumptions 


The clock-count values assume the following: 


Uo OU 


a 


7.4.2 Abbreviations 


The clock-count values listed in the instruction set summary table are grouped 
by operating mode and whether there is a register/cache hit or a cache miss. 
In some cases, more than one clock count is shown in a column for a given 
instruction, or a variable is used in the clock count. The abbreviations used for 
these conditions are listed in Table 7-16. 


Table 7—16. Clock-Count Abbreviations 


7.5 


Instruction Set 


The instruction has been prefetched, decoded, and is ready for execution. 
Bus cycles do not require wait states. 

There are no local-bus HOLD requests delaying processor access to the 
bus. 

No exceptions are detected during instruction execution. 

If an effective address is calculated, it does not use two general register 
components. One register, scaling, and displacement can be used within 
the clock count shown. However, if the effective-address calculation uses 
two general register components, add 1 to the clock count shown. 

All clock counts assume aligned 16-bit memory/IO operands for cache- 
miss counts. 

If instructions access a misaligned 16-bit operand or a 32-bit operand on 
even addresses, add two clock counts for read or write, and add four clock 
counts for read and write. 

If instructions access a 32-bit operand on odd addresses, add four clock 
counts for read or write, and add eight clock counts for read and write. 


Clock-Count 
Symbol Explanation 
/ Register operand/memory operand 
n Number of times operation is repeated 
L Level of the stack frame 
| Conditional jump taken | conditional jump not taken 
\ CPL <IOPL\ CPL > IOPL 


The TI486SXLC and TI486SXL instruction set is provided in Table 7-17. 
Instruction name, encoding, flags that are affected, and instruction clock 
counts for each instruction are shown. The clock-count values are based on 
the assumptions described in subsection 7.4.1. 
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Appendix A 


Programming 
System Management Mode (SMM) 


This appendix provides detailed information on programming the 
TI486SXL(C) system management mode (SMM). The topics are SMI exam- 
ples, testing/debugging SMM code, power management features, loading 
SMM programs, detection of CPU type, presence of SMM-capable devices, 
creating macros, and altering SMM code limits. 


eT | 


Note: 


The final responsibility for verifying designs incorporating TI486SXL(C) 
microprocessors rests with the customer originating the motherboard 
design. 
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A.1 SMM Overview 


A.1.1 


Introduction 


This programmer’s guide has been written to aid programmers in the creation 
of software using the TI486SXL(C) family of microprocessors system man- 
agement mode (SMM). SMM is currently implemented in all versions of the 
TI486SXL(C) microprocessors. 


For an introduction to SMM and additional information, refer to: 


1 Section A.3, SMM Features Comparison (page A-4), which compares 
the differences between the TI486SXLC and the TI486SXL and other in- 
dustry offerings that implement SMM 


Lj Subsection A.14.3, Clearing the VM Flag Bit (page A-42), which contains 
important information concerning SMM programming. 


A.1.2 SMM Implementation 
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SMM operation in the Tl486SXL(C) microprocessors is similar to related op- 
erations in comparable Advanced Micro Devices and Intel Corporation micro- 
processors. Each implementation: 


1 Switches into real mode upon entry into the SMM interrupt handler 
Lj) Has unique SMM code locations 

J Saves the programmer-visible register contents upon entry 

L1 Saves the nonprogrammer-visible register contents 


The TI microprocessors have a programmable location and size for the SMM 
memory region. The TI SMM implementation also provides unique instructions 
that save additional Segment registers as required by the programmer, in addi- 
tion to the x86 MOV instruction that saves the General-Purpose registers. 


The Tl microprocessor automatically saves the minimal register information, 
reducing the entry and exit clock count to 140. This compares with Intel’s clock 
overhead for entry and exit of 804 clocks and AMD’s minimum of 694 clocks. 
(See Section A.3, SMM Feature Comparison (page A-4), for a comparison 
of SMM overhead.) 


Although all three manufacturers’ microprocessors provide I/O trapping, the 
TI486SXL(C) microprocessors SMM simplifies identification of I/O type and 
instruction restarting. The T| CPU SMM process is unique in its ability to permit 
software relocation and sizing of the SMM address region. This flexibility facili- 
tates run-time changes to SMM support. This software flexibility lets an operat- 
ing system or debugger change, modify, or disable the SMM code. 
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A.2 TI486SXL(C) Microprocessor Power Management Features 


The Tl486SXL(C) microprocessor family provides several methods and levels 
of power management. The fully static design, suspend mode, system man- 
agement mode (SMM), and 3.3-V operation can achieve optimum CPU and 
system power management. Table A-1 summarizes the various power man- 
agement options: 


Table A—1.Power Management Options 


Option Power Savings 

Reduced Clock Frequency loc = (12 x feLk2 (MHz)) + 150 mA @ 5 V 
Lower Supply Voltage (Vcc) loc = (130 x Voc) — 256 mA @ 25 MHz 
Suspend Mode 2% of typical Icc 

Remove Clock 25% of typical Icc 


Suspend Mode and Remove Clock 400 pA 


Remove Power 0 vA 


A.2.1 Reducing the Clock Frequency 


The TI486SXL(C) microprocessor family is a fully static design; the input clock 
frequency can be reduced or stopped without a loss of internal CPU data or 
state. The system designer can decide to reduce the clock using SMM capabil- 
ities to support advanced power management (APM) software in concert with 
chipset capabilities. When the clock is removed, then restarted, CPU execu- 
tion begins with the instruction where the clock was removed. Note that the 
clock-doubled versions of Tl486SXL(C) family must be brought into the non- 
clock-doubled mode before scaling or stopping the input CLK2. 


A.2.2 Suspend Mode 


The Tl486SXL(C) microprocessor family supports suspend mode operation 
that can be initiated through software or hardware. 


Software initiates suspend mode through execution of a halt (HLT) instruction. 
After HLT is executed, the CPU enters suspend mode and asserts suspend 
acknowledge (SUSPA#), if enabled. 


Hardware initiates suspend mode by using the SUSP# and SUSPA# pins of 
the microprocessor. When SUSP# is asserted, the CPU completes any pend- 
ing instructions and bus cycles and then enters suspend mode. Once in sus- 
pend mode, the SUSPA# pin is asserted by the CPU. 
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A.3 SMM Feature Comparison 


The SMM features of the TI486SXLC and TIl486SXL microprocessors are 


compared with other versions of microprocessors in Table A-2. 


Table A—2.SMM Features 


Feature TI486SXLC TI486SXL 386SL AMD 
SMM Entry Point BaseofSMMspace BaseofSMMspace 38000h Reset vector 

(0 to 32M bytes less_ (0 to 4G bytes less 

4K bytes) 4K bytes) 
CPU State Save Top of SMM space Top of SMM space 3FFA8h-3FFFFh 60000h-600CAh 
Area and 60100h-60126h 
SMM Space Programmable Programmable 38000/30000h Entire address 

(4K to 16M) (4K to 4G) (32K/64k) space 


Data Auto-Saved 


8 32-bit registers 
1 16-bit register 
1 4-bit register 


8 32-bit registers 
1 16-bit register 
1 4-bit register 


44 32-bit registers 
9 16-bit registers 


53 32-bit registers 
8 16-bit registers 


SMM Memory None None 8-bit on 8-MHz Nonpipelined 
Restrictions XD Bus No dynamic bus siz- 
ing 
Normal Mode Yes Yes Yes No 
SMM Memory 
Access 
Hardware Pins 2 2 NA — Must use 4 
82360 
IncrementalCPU Yes Yes No No 
State Save 
Instructions 
I/O Trapping Yes Yes Yes Yes 
SMI# Input Yes Yes Yes No 
Masking 


t Address Region 4 register is 32 bits wide to support 4G-byte physical address space. 
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A.4 SMM Hardware Considerations 


The following sections provide an overview of TI486SXL(C) SMM coding and 
information helpful in developing SMM code. 


A.4.1_ SMM Pins 


The SMI# and SMADS# pins implement SMM. The bidirectional SMI# pin is 
used by the chipsetto signal the CPU that an SMI has occurred. While the CPU 
is in the process of servicing an SMM interrupt, the same pin sends a signal 
to the chipset to indicate that the SMM processing is occurring. The SMADS# 
address strobe is generated instead of the ADS# address strobe while execut- 
ing or accessing data in SMM address space. 


A.4.2. SMI# Pin Timing 


In order to enter the system management mode, the SMI# pin must be as- 
serted for at least four CLK2 periods. See Figure A—1. Once the CPU recog- 
nizes the active SMI input, the CPU drives the SMI input low for the duration 
of the SMI routine. The SMI routine is terminated with an SMI-specific resume 
(RSM) instruction. When the RSM instruction is executed, the CPU drives the 
SMI# pin high for two CLK2 periods. The SMI# pin bidirectional design does 
the following: 


1 Prohibits more than one SMI interrupt from becoming active 


1 Provides feedback to the chip-set/core logic that an SMI is in process 


[J Provides compatibility with other SMM hardware interfaces 
Figure A—1. SMI# Pin Timing 


1 G2 1 G2 1 G2 (h1 H2 HT G2 1 G2, 1 G2 (1 G2 H1 H2 HT G2, 1 G2 1 G2 


) —————————— 


| 

| 

1 2 3 4 5 
Indicates that Tl486SXLC drives the SMI# pin. 


A.4.3 Address Strobes 


The Tl486SXL(C) microprocessor has two address strobes, ADS# and 
SMADS#. ADS# is the address strobe used during normal operations. The 
SMADS# address strobe replaces ADS# during SMM operations when data 
is written, read, or fetched in the SMM defined region. Using a separate ad- 
dress strobe increases chipset compatibility and control. 


During an SMM interrupt routine, control can be transferred to main memory 
via a JMP, CALL, Jcc (conditional jump, cc = condition code) instruction or 
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execution of a software interrupt (INT). Execution in main memory causes 
ADS# to be generated for code and data outside of the defined SMM address 
region. (It is assumed, but not required, that the chipset ultimately translates 
SMADS# and a particular address to some other address.) To access code in 
main memory that overlaps the SMM address space, the MMAC bit (CCR1, 
bit 3) must be set. This allows ADS# strobes to be generated for MOV instruc- 
tions that overlap main memory while in SMM mode. It is not possible to 
execute code in main memory that overlaps SMM space while in the SMM 
mode. 


SMADS# can also be generated for memory reads, writes, and code fetches 
within the defined SMM region when the SMAC bit, Configuration Control 1 
register (CCR1) bit 2, is set while in normal mode. (See subsection 2.5.4, Con- 
figuration Registers on page 2-26, for further information on CCR1). The gen- 
eration of SMADS# permits a program in normal space to jump into SMM code 
space. The microprocessor must be in real mode before the jump occurs into 
SMM space. A routine should be followed to initialize used registers to their 
real-mode state. The RSM instruction should not be used after jumping into 
SMM space unless return information is written into the SMM context area be- 
fore the RSM instruction is executed. 


A.4.4 Chipset READY# 
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The Tl486SXL(C) microprocessors have one READY# input. Chipsets that 
implement the dual READY lines can OR the two ready lines together for the 
single READY#. The AMD implementation of SMM provides for two READY 
lines from the chipset, one for SMM space (SREADY#) and one for the normal 
READY#. 
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A.5 SMM Software Considerations 


At the start of the SMM routine, before control is transferred to code executing 
at SMM base, some of the CPU state is saved at the end of SMM memory. This 
is one area where the CPU SMM state is unique. The CPU saves the minimum 
CPU state information necessary for an interrupt handler to execute and return 
to the interrupted context. The information is saved at the top of the defined 
SMM region (starting at SMM base + size — 30h). Of the typically used program 
registers, only the CS, EFLAGS, CRO, and DR7 are saved upon entry. This 
requires that data accesses use a CS segment override to save other registers 
and access data. To use any other register, the SMM programmer must first 
save the contents using the SVDC instruction for Segment registers or MOV 
operations for General-Purpose registers (See Section A.7, SMM Instruction 
Summary and Macros, page A-12). Itis possible to save all the CPU registers 
as needed. 


The Tl486SXL(C) microprocessors are unique in saving the previous IP be- 
fore the SMI and the next IP to be executed after exiting the SMI handler. Upon 
execution of an RSM instruction, control is returned to the NEXT IP. The value 
of the NEXT IP may need to be modified for restarting OUTSx/INSx instruc- 
tions; this modification is a simple move (MOV) of the PREVIOUS IP value to 
the NEXT IP location. Execution is then returned to the I/O instruction, rather 
than the instruction after the next I/O instruction. (The restarting of I/O instruc- 
tions may also require modifications to the ESI, ECX, and EDI depending on 
the instruction. See Section A.8, SM! Handler Example (page A-17), for typical 
code used.) 


Figure A—2 and Table A—3 describe the SMM header. The P and | bits indicate 
whether a INSx/OUTSx and a REP prefix were being executed. IN/OUT 
instructions are restarted by changing NEXT IP and leaving the SMI handler. 


cca | 
Note: 


The only area in the SMM header that the programmer should consider alter- 
ing is the NEXT IP. Altering any other header values can have unpredictable 


results. 
| | 


The EFLAGS, CRO, and DR7 registers are set to the reset values upon entry 
to the SMI handler. This has implications for setting break points using the De- 
bug registers. Break points cannot be set prior to the SMI using Debug regis- 
ters. The INT 3 debug code trap technique can be used; however, it must be 
used prior to the occurrence of the SMI in SMM space. Once the SMI has oc- 
curred and the debugger has control in SMM space, the Debug registers can 
be used for the remaining SMI execution. 
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Figure A—2. SMM Header 


Table A-3. SMM Header 


Name 


DR7 
EFLAGS 
CRO 

Current IP 
Next IP 

CS Selector 
CS Descriptor 


P 


ESI or EDI 


31 0 
Top of SMM —» 
Addrass Space AB -Ah 
EFLAGS 
-8h 
CRO 
-Ch 
Current IP 
-10h 
Next IP 
31 16 15 01! 44h 
Reserved CS Selector 
-18h 
CS Descriptor (Bits 68-32) 
-1Ch 
31 CS Descriptor (Bits 31-0) 210 
-20h 
Reserved P| | | 
-24h 
Reserved 
-28h 
Reserved 
-2Ch 
ESI or EDI 
-30h 
Description Size 
The contents of the Debug register 7 4 Bytes 
The contents of the extended Flag-Word register 4 Bytes 
The contents of the Control register 0 4 Bytes 
The address of the instruction executed before servicing the SMI interrupt 4 Bytes 
The address of the next instruction that will be executed after exiting the SMM mode 4 Bytes 
Code Segment register selector for the current code segment 2 Bytes 
Code register descriptor for the current code segment 8 Bytes 
REP INSx/OUTSx Indicator: 1 Bit 
P = 1 if current instruction has a REP prefix 
P =O if current instruction does not have REP prefix 
IN, INSx, OUT, or OUTSx Indicator: 1 Bit 
| = 1 if current instruction performed is an I/O WRITE 
| = 0 if current instruction performed is an I/O READ 
Restored ESI or EDI value. Used when it is necessary to repeat an REP OUTSx or 4 Bytes 


REP INSx instruction when one of the I/O cycles caused an SMI# trap 


Note: INSx = INS, INSB, INSW, or INSD instruction. 
Note: OUTSx = OUTS, OUTSB, OUTSW, or OUTSD instruction. 
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A.5.1_ Exiting the SMI Handler 


When the RSM instruction is executed at the end of the SMI handler, the IP 
is loaded from the top of the SMM at the address (SMMbase +SMMsize — 14h) 
called SMI_NEXTIP. This permits the instruction to be restarted. The values 
of ECX, ESI, and EDI, before execution of the instruction that was interrupted 
by SMI can be restored from information in the header that pertains to the INx 
and OUTx instructions. The only registers that are restored from the SMM 
header are CS, NEXT_IP, EFLAGS, CRO, and DR7. 


A.5.2 Accessing Main Memory At the Same Address as SMM Code 


Example A-1. 


out 


To access main memory overlapping the SMM space (i.e., generate ADS# 
from memory MOV instructions rather than SMADS#), set the MMAC (main 
memory access) bit in CCR1. The code in Example A—1 enables MMAC: 


Accessing Main Memory Overlapping SMM Space 


al, Oclh ;select CCR1 

22h, al 

al, 23h 7;get CCR1 current value 
ah, al ;save it 

al, Oclh 

22h, al 

al, ah 

al, O8h ;set MMAC 

23h, al 


;Now all non-cs-prefixed data memory access will use ADS#; 
7Code fetches will continue from SMM memory using SMADS# 


a 


;Disable MMAC 


A.5.3 


mov 
out 
mov 
out 


al, Oclh ;select CCR1 

22h, al 

al, ah 7get old value of CCR1 
23h, al jand restore it 


Miscellaneous Execution Details 


The following list provides additional details pertaining to the execution of 
instructions associated with SMM/SMI functions. 


1 Execution of SMM code begins atthe start of SMM space. This is the value 
entered onto the base portion of AAR4. The CS base is set to the ARR4 
SMM base, and EIP is equal to 0. CS limit is the size of the SMM segment 
set in ARR4. 


Li) The A20# input to the CPU is ignored for all SMM space accesses. These 
are all accesses that use SMADS#. 


1 All SMM instructions can be executed outside the SMM defined space, 
provided that the SMAC bit is set in CCR1 or execution of an SMI handler 
is in progress. (An SMI handler is in progress during the time the CPU is 
driving the SMI pin low.) 
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a 


Setting the MMAC bit permits the reading and writing of main memory 
addresses that overlap SMM memory while an SMI is in progress. 


It is not possible to execute code in main memory that overlaps SMM 
memory addresses while an SMI is in progress. 


NMI is the only enabled interrupt at the entry to the SMI handler. You 
should provide latches to disable NMI while the SMI is in progress. 


The SMI handler can execute calls, jumps, and other changes of flow and 
can generate software interrupts and faults using the current definition of 
the IDT. (Note that on entry to the SMI handler, the IDT is not set to the 
reset real-mode value of 0:0.) 


The SMI handler can go from real mode to protected mode and vice-versa. 
Almost anything that can be done normally can also be done during the 
SMI service routine. 


SMM memory is not cached. 


If the location of SMM space is beyond 1M byte, the value in CS truncates 
the segment above 16 bits. This prohibits doing calls or INTs from real 
mode without restoring the 32-bit features of the 486 because of the incor- 
rect return address on the stack. 


An undefined opcode exception is typically generated when conditions are 
not correct to permit the execution of SMM instructions. 


To execute outside the SMM region (BIOS, debugger, etc.) the CS limit 
must be changed after entry to the SMI handler. The limit of the CS Seg- 
ment register is set to the size of the SMM region in ARR4. This means 
that EIP cannot become larger than the SMM region size. Since jumps in 
real mode do not change the CS limit, this has implications for software 
interrupts and jumps out of SMM space. (See Section A.13, Altering SMM 
Code Limits on page A-34 for details and options.) 


Segment registers other than the CS have the limits set in the nonpro- 
grammer-visible portion that were present before the SMI. To avoid a 
protection error due to the limit or other violations, the RSDC SMM instruc- 
tion should be used to change the limit of the register in use. (See Section 
A.12, Format of Data Used by SVDC/RSDC Instructions on page A-32.) 


Enabling SMM 


A.6 Enabling SMM 


To enable and setup SMM in the CPU, set all four of the SMM registers/bits 
to the values shown in Table A-4 using the code supplied in Example A-2. 


See subsection 2.5.4, Configuration Registers (page 2-26), for further in- 
formation on CCR1 and ARR4. 


Table A-4. Setting SMM Register Bits 


Register/Bit Locationt Value Description 

SMI CCR1 bit 1 1 Enable SMI pin 

SM4 CCR1 bit 7 1 Make ARR4 as SMM space 
SM_loc ARR4 bits 12-4 Start SMM region SMM base address 
SM_size ARR4 bits 3-0 > 4KB and < 16MB SMM size 


Example A—2. SMM Setup 


Setup example 


7SMM Location = O0C8000H 
;SMM Size = 8KB 


mov al, Oclih ; index to CCR1 

out 22h, al 7 select CCR1 register 

in ah, 23h ; read current CCR1 value 

or ah, 082h , enable SMI and SM4 region 

mov al, Ocih ; index to CCR1 

out 22h, al 7 select CCR1 register 

out 23h, ah ; write new value to CCR1 

mov al, Oceh ; index ARR4 SMM base address bits <23-16> 
out 22h, al ; select 

mov al, Och ; set ARR4 SMM base address upper bits 

out 23h, al ; write value 

mov al, Ocfh ; index ARR4 SMM base address bits <15-12> 
out 22h, al ; and 4 bits for SMM size 

mov al, 082h ; set SMM lower address bits and SMM size 
out 23h, al ; write value 
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A.7 SMM Instruction Summary and Macros 


The TI486SXL(C) microprocessor responds to seven instructions when it is in 
SM mode. These seven nonstandard instructions include: 


1 Two that save and restore a Segment register and its descriptor 
_j Two that save and restore the Task register 

_j Two that save and restore the LDT register 

Lj) One that exits SM mode 


The instructions that save and restore registers are needed because the CPU 
saves a minimum amount of information in the SM header (for speed). If one 
or more of the Segment registers in the SM interrupt handler needs to be modi- 
fied, the previous values need to be preserved as they are not automatically 
saved in the header. The instructions that save and restore Segment registers 
are provided for this purpose. Similarly, the instructions that save and restore 
the Task register and LDT register allow creation of an SM interrupt handler 
that enters protected mode and acts as a task dispatcher. 


The seven SM instructions summarized in Table A—5 are valid only when CPL 
is 0 and either of the following is true: 


Li The SMAC, SMI, and SM4 bits are set and a valid SMM region is defined 
(the SMM size defined to be greater than 0). 


[J] The SMI# pin is driven low by the CPU. (The CPU drives SMI# low after 
it recognizes the SMI interrupt and continues to drive it low until RSM is 
executed. See Figure A-1 page A-5.) 
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Table A—5.SMM Instruction Set with Clock Counts 


Instruction Mnemonic Opcode Clocks Description 


rsdc rst_seg OF 79 14 Restores a Segment register 
from an 80-bit memory location.t 


rsidt rst_ldt OF 7B 14 Restores the Local-Descriptor- 
Table register from an 80-bit 
memory location.t 


rsts rst_tr OF 7D 14 Restores the Task register from 
an 80-bit memory location.t 

svdc sav_seg OF 78 22 Saves a Segment register at an 
80-bit memory location.+ 

svidt sav_ldt OF 7A 22 Saves the Local-Descriptor-Table 
register at an 80-bit memory loca- 
tion.+ 

svts sav_tr OF 7C 22 Saves the Task register at an 


80-bit memory location.+ 


rsm exit_sm OF AA 58 Restores the state of the CPU 
from the data saved in the header 
at the top of SM memory (the 
header is created by the proces- 
sor when it recognizes an SM). 
This instruction takes the proces- 
sor out of SM mode and returns it 
to the task that was executing 
when the SMI occurred. 


t The restore includes the descriptor information that is invisible to applications. 
+ The save includes the descriptor information that is invisible to applications. 


The values in the second column in Table A-—5, titled Mnemonic, are arbitrary 
since there is no current assembler support for the SM instructions. That 
means that the code is probably generated manually. In generating the code, 
other arbitrary names may be preferred. The names shown in the first column 
of Table A-5 are the instruction names that have been added to the 
TI486SXL(C) instruction set. The mnemonics are a bit more descriptive and 
are used in the example macros, Example A-3. These examples for generat- 
ing SM instruction code have been rewritten from earlier versions. 


The third column in Table A-5 provides the basic opcode for the SM instruc- 
tions. In addition to these basic codes, the first six SM instructions listed can 
be prefixed with a segment override and/or an address size override, and they 
require a mod r/m byte and a memory offset. 


The include file shown in Example A-3 contains some macros that are useful 
within an SM interrupt handler. These macros implement versions of the 
seven special SM instructions shown in Table A-5. These macros can be used 
as is or modified to suit the particular application. 
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Example A-3. Macros That Implement the Special SM Instructions 


COMMENT “* 


File: SM.MAC 


Copyright (c) 1994 Texas Instruments, Incorporated 


This include file defines a set of macros for generating System Management (SM) 
mode instruction opcodes, since no assembler directly supports these SM 
instructions. 


There are six SM instructions that are used to save and restore registers that 
are not automatically saved when SM mode is entered, and one instruction for 
exiting from SM mode. These instructions support many addressing modes, but 
the macros in this file only implement one mode--a 16-bit memory reference 
(within the code segment as a CS: override is also used). These macros could 
be made much more complex to allow other addressing modes, but the additional 
complexity wouldn’t provide much useful benefit. 


Each of the macros that implements a register save or restore takes as a 
parameter an offset in the code segment where the register should be saved to 
or restored from. The two macros that save and restore segment registers also 
take the name of a segment register as a parameter. 


Here is a small portion of code that shows how the macros in this file are used: 


<<<<<<< BEGIN EXAMPLE CODE >>>>>>> 


- CODE 


smi_entry_point: 


sav_seg old_ds,ds ; Save segment registers 
sav_seg old_es,es 

sav_seg old_fs,fs 

sav_seg old_gs,gs 

sav_seg old_ss,ss 

sav_ldt old_ldt ; Save LDTR and TR 
sav_tr. old utr 


mov dword ptr cs:old_eax, eax ; Save other registers 
mov cs:old_ebx, ebx 
rst_seg ds,old_ds ; Restore segment registers 


rst_seg es,old_es 
rst_seg fs,old_fs 
rst_seg gs,old_gs 


ret_seg ss;old_ss 


rst_ldt old_ldt 
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Restore LDTR and TR 


rst_tr old_tr 
mov eax,dword ptr cs:old_eax Restore other registers 
mov ebx,dword ptr cs:old_ebx 
exit_sm Exit SM interrupt handler 
old_ds dt ? 10 bytes in code segment 
old_es dt ee 
old_fs dt 3 
old_gs dt ? 
old_ss dt ? 
old_tr dt ? 
old_ldt dt ? 
old_eax dd 2? 
old_ebx dd ? 
<<<<<<< END EXAMPLE CODE >>>>>>> 
A 
po co-------------------------------------------------------+------+-------------- 
; NOTE: The location at addr must be 10 bytes in size and it must reside 
; within the code segment. It should be defined as: 
, 
;addr dt ? 
ps Mee ee a a ee ee 
sav_seg MACRO addr, reg Save one of the segment registers 
SMMac sav_seg, addr, reg, 78h 
END. 
rst_seg MACRO reg, addr Restore one of the segment registers 
SMMac rst_seg, addr, reg, 79h 
END 
sav_ldt MACRO addr Save the LDT register 
SMMac sav_ldt, addr, ldt, 7Ah 
END 
rst_ldt MACRO addr Restore the LDT register 
SMMac rst_ldt, addr, ldt, 7Bh 
END. 
sav_ts MACRO addr Save the Task register 
SMMac sav_ts, addr, ts, 7Ch 
END 
rst_ts MACRO addr Restore the Task register 
SMMac rst_ts, addr, ts, 7Dh 
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ENDM 


exit_sm MACRO 


ENDM 


SMMac 


ENDM 


A-16 


DB OOFh, OAAh 


; Exit from SM mode 


MACRO mname, addr, reg, op 


7 CS: override and SM 
db 2Eh 
db OFh, op 


7 mod r/m byte 


ifidni <reg>, 
db OOEh 
elseifidni <reg>, 
db 01Eh 
elseifidni <reg>, 
db 026h 
elseifidni <reg>, 
db 02Eh 
elseifidni <reg>, 
db 016h 
elseifidni <reg>, 
db 006h 
elseifidni <reg>, 
db 006h 
elseifidni <reg>, 
db 006h 
else 
ECHO ERROR in 
ECHO Register 
ECHO Register 
ECHO or LDT 
- ERR 
endif 


; 16-bit displacement 
dw offset addr 


instruction opcode 


<cs> 


<ds> 


<fs> 


<gs> 


<ss> 


<es> 


<ts> 


<ldt> 


macro <mname>: 


parameter unknown: <reg> 
parameter must be either CS, 


DS, 


ES, 


FS, 


GS, 


SS, 


TS, 


SMI Handler Example 


A.8 SMI Handler Example 


This section contains fragments of typical coding found in SMI handlers. 


Example A—4. Typical Coding Found In SMI Handlers 


SMBASE= O0C8000H 7 base address of SMM space 
SMSIZE= 2 ; SMM space size is 8k bytes 
SMEND = SMSIZE SHL (SMSIZE-1) ;works for most cases 
INCLUDE SM.MAC ;see Section Example A-3, page A-14 
-MODEL SMALL 
-386P 
- CODE 
COMMENT * 


Execution begins here in real mode, with CS defined at the SMBASE and EIP=0 


A 


public smi_start 
smi_start: 
jmp Sskipdata ;skip data area, makes it easy for 
yassembler 


EAXsave dd 2 
DSsave dt 2 
DStemp db Offh, Offh, 0,0,0,92h,8fh,0,0,0 ;4gig present segment 
Sskipdata: 
mov dword ptr cs: [EAXsave],eax; save EAX 
sav_seg [DSsave], ds ; save DS 
rst_seg ds, [DStemp] ; setDS 
COMMENT *% 


We need to extend the limits of DS so that we don’t get a fault when we use it to ac- 
cess low memory. It may be not present with a limit of 0, and these values won’t be 
changed when we set it using a real mode load. 


A 


;Determine Why Are We In The SMI Handler 


COMMENT * 
Chipset/Core logic unique instructions will follow. The chipset will be used to deter 
mine what caused the SMM interrupt to occur. The BIOS could also “jump” to this point 


in the SMM region. 


Decision Tree: 


a) If timer, go to timer_expired 
b) If port i/o occurred to a trapped location, go to port_io_caused 
c) If the cpu was turned off, go to cpu_turned_off 


A 


;timer_expired; 
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COMMENT “* 
A chipset timer has expired. Unique code would appear to determine which timer. De- 
pending on the purpose of the timer, the handler could: 


Reduce the clock frequency 

Execute a halt instruction and enter suspend mode 
Turn current off to the CPU 

Turn off a peripheral device 

Reset the timer and increment a counter 


OP WN EF 


Aa 


reduce_clock: 


COMMENT “* 

To go to a lower CPU current requirement, the CPU clock can be reduced. The CPU clock 
can be reduced from its current setting to a lower value. That value could be zero. 
Since the CPU is a static device and will maintain the state of all its registers in 
the absence of a clock input there is no state saving requirement. It is assumed that 
by writing to the chipset it will reduce or zero the clock. If the clock is stopped, 
the next instruction to be executed will be one in this SMI handler immediately fol- 
lowing the point where the chipset turned the clock off. 


Aa 


jmp end_timer: 


execute_halt: 


COMMENT “* 

To go to a lower CPU current consumption, the SMI handler will now execute a HLT 
instruction. The HLT instruction will put the CPU into a low power sleep mode until a 
non-SMI interrupt occurs. Interrupt(s) will need to be enabled to permit the interrupt 
to wake-up the CPU. A common choice would be the keyboard interrupt. A flag would need 
to be set in main memory to indicate that the SMI handler should be jumped into or SMI 
created, to permit it to restore the state/context of the CPU, prior to the halt for 
servicing the interrupt. The interrupt in low memory must point to the BIOS handler 
for the return to be made to the SMI handler. An interrupt handler in SMM space could 


also service the interrupt rather than a BIOS routine. 
a 


;[ Alternatively the chipset could pull the SUSP# CPU pin low to enter ] 
;[ suspend mode. The chipset would have to pull SUSP# high to exit ] 
7[{ suspend mode. ] 


:To be sure that BIOS will get control on intr 

;check for keyboard interrupt vector pointing to BIOS 

7if not BIOS, save existing and set to BIOS vector or jump to can_not_halt 
7Set a flag in main memory indicating SMI HALT executed 

;If an SMM space interrupt handler is used, then IDTR and/or the vector 
;would need to be updated to the SMM space routine. 


mov ax, O 7 point to bottom segment 
mov ds, ax ; ds segment is now in main memory 
mov [485], 1 ; set BIOS flag in main memory 
;<set cpu state for bios int> 
hit ; last instruction executed here 
;<the chipset could remove the clock to go to suspend mode now> 
nop 
can_not_halt: ;CPU state will not be correct at interrupt 


jmp end_timer 
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turn_off_cpu: 
; set bit in main memory to indicate to the BIOS that SMI handler 


; turned power off to CPU and CPU state should be restored by 
; the SMI handler 


mov ax, O ; point to bottom segment 
mov ds, ax ; ds segment is now in main memory 
mov [485], 1 ; set BIOS flag in memory 
‘ (save entire CPU state. See Restore CPU state label) 
7 (chipset specific instructions to be executed to remove power to 
; cpu) 
; jmp end_timer 


turn_off_peripheral: 


; chipset specific instructions to turn off peripheral and enable 
; chipset I/O trapping of the devices io range or enable timer 

; to allow polling of peripheral requirements. 

jmp end_timer 


reset_timer: 
; chipset specific instructions to be executed to reset a timer and 
; possibly increment a counter to maintain number to time out 
; for a particular device. 
jmp end_timer 


end_timer: 


jmp done 


port_io_caused: 


COMMENT * 

The SMM support for I/O being interrupted provides information that permits the re- 
starting of the I/O instruction without investigating the actual code where the 
instruction is located. 


Many things can be done at this point beyond turning on a powered down peripheral. The 
CPU clock could now be speeded up in anticipation of heavy CPU processing require- 
ments, timers could be reset, etc. 


A 


;** Restart the interrupted instruction 


mov eax,dword ptr [SMEND+SMI_PREVIOUSIP] 
mov dword ptr [SMEND+SMI_NEXTIP],eax 
mov al,byte ptr cs: [SMEND+SMI_BITS] 
;test for REP instruction 

bt al,2 ;rep instruction? 

7 (result to Carry) 
adc ecx,0 ;if so, increment ecx 
test al,1 shl 1 ;test bit 1 to see 


;if an OUTS or INS 
jnz out_instr 
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COMMENT “* 
** A port read (INx) instruction caused the chipset to generate an SMI instruc-— 
tion. Restore EDI saved by SMI microcode. 
mov edi, dword ptr cs: [SMEND+SMI_EDIEST] 
jmp common1 
out_instr: 


COMMENT “* 
** A port write (OUTx) instruction caused the chipset to generate an SMI 
instruction. Restore ESI saved by SMI microcode. 


Aa 


mov esi, dword ptr cs: [SMEND+SMI_EDIEST] 
common1: 
jmp done 


cpu_turned_off: 


COMMENT * 

This handler turned off the current to the CPU. Before it did, the handler set a bit 

in main memory or battery-backed-up CMOS indicating that this event happened. At re- 

set, BIOS will determine that this was the case and "Jjump” into the SMI handler. SMI 

handler will then restore the entire state/context of the CPU prior to current being 

removed. The bit in main memory would also be cleared indicating that the SMI handler 
had removed current. 


Aa 


mov ax, 0 ; point to bottom segment 

mov ds, ax ; ds segment is now in main memory 
mov [485], 0 ; Clear BIOS flag in main memory 
mov ax, CS ; restore ds to SMM area 


mov ds, ax 
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{Restore Complete CPU State} 


; eax 
: ebx 
; ecx 
; edx 
; edi 
; esi 
i ebp 
; esp 
: cs ;use rst_seg 
; ds yuse rst_seg 
4 ss use rst_seg 
; es ;use rst_seg 
; fs yuse rst_seg 
; gs yuse rst_seg 
; ldtr 
; gdtr 
; idtr 
; tr 
; eflags 
7 cr0 
; CErZ 
; cr3 
; dr0 
; dri 
: dr2 
; dr3 
7 dr6 
; dr7 
; ccr0 
; Cord. 
7 ecer2 
; Save the configuration registers with index C3h through FFh 
; for future product compatibility 
: arrl 
; arr2 
: arr3 
: arr4 
jmp done 
done: 
mov eax,cs: [EHAXsave] 


rst_seg ds, [DSsave] 
exit_sm ; return 
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A.9 Loading SMM Memory With an SMM Program From Main Memory 


Example A-5. 


-MODEL MEDIUM 


- STACK 


To load SMM memory with an SMI interrupt handler, it is important that the SMI 
interrupt does not occur before the handler is ready to accept it. This can be 
done by not having SMAC = 0 and SMI = 1 (in the CCR1 register) before the 
SMI handler is installed. It is necessary to set SM4 = 1 (in the CCR1 register) 
and ARR4 with appropriate values before using the SMM memory. ARR4 de- 
fines an SMM memory space as anoncacheable memory region when bit SM4 
of CCR1 is set to 1. 


To load SMM memory with a program, it is first necessary to enable SMM with 
the exception of the SMI# pin by setting SMAC. (See Section A.6, Enabling 
SMM, page A-11.) The SMM region is then mapped over main memory at the 
same location. This is done by the generation of SMADS# for memory access 
for the SMI. A REP MOV instruction can then be used to transfer the program 
to the location. Then, turn off SMAC to activate potential SMls. 


See Example A—5 for sample code that performs these operations. 


SMI Handler Routine 


MACROS 


iodlay_ macro 
jcxz 
jcxz 
endm 


segcs_ macro 
db 
endm 


include SM.MAC 


- CODE 


$+2 


02E 


; Short delay for I/O operations 


7 CS: override prefix 


; See Example A-3 page A-14 


When an SM interrupt occurs, the code segment base is set to the SM area 
start as defined in ARR4, and the IP is set to 0. This means the first SM 
handler instruction must be at offset 0--that is why this loader program 
begins with the SM handler code. The offsets referenced in the SMI portion 


; of this program will be correct in SM mode as well. 


A-22 


Loading SMM Memory With an SMM Program from Main Memory 


smi_code_start: 


; Save DS, ES, TS, LDT, AX, and CX (only AX and CX are used by the handler--the 
; other registers are only saved to show how the macros are used). 


sav_seg old_ds, ds 
sav_seg old_es, es 
sav_tr oldtr 
sav_ldt old_ldt 


mov dword ptr cs:old_eax, eax 

mov dword ptr cs:old_ecx, ecx 
Bo ee Re eae aa a aa eee see 
; The main handler code goes here ... The code below simply writes a down 


7 count to port 80--your code will be much more complex and useful. 


; Write port 80 values 


mov al, OFFh 
decloop: 
out 80h, al 
mov cx, 8FFFh 
loop $ ; Delay 
dec al 
jnz decloop 


; Restore registers saved at start of handler, then exit from SM mode. 


rst_seg ds, old_ds 
rst_seg es, old_es 
rete cr oldbr 
replat old dt 


mov eax, dword ptr cs:old_eax 
mov ecx, dword ptr cs:old_ecx 
exit_sm ; Exit SM mode--resume the interrupted 


; program 


smi_code_end: 


; The locations below are for saving registers that are used in the SMI routine 
> but are not automatically saved when an SM interrupt occurs. Some of the 

; registers saved below are not actually used by the code in this example, but 
; they are saved/restored just to demonstrate how the SM macros shown earlier 

; are used. 
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olduds dt 
old_es dt 
oloster Ae 
old_ldt dt 
old_eax dd 
old_ecx dd 


Vv Vv VN 


; PRO © ED URE. SS USED BY TH 


A 


LOAD 


Fl 
w 


; Read a value from a register in AL via I/O ports 22 and 23. Return the value 
; in AL. 


, 


r22_23 proc near 
out 22h, al 
iodlay_ 
in al, 23h 
ret 


r22_23 endp 


; Write the value in AH to a register in AL via I/O ports 22 and 23. 


w22_23 proc near 
out 22h, al 
iodlay_ 
mov al, ah 
out 23h, al 
ret 


w22_23 endp 


; LOADER ENTRY BO} Te Ney 


entry_point: 


; Set ARR4 registers for 64K SMM area at 000A0000: ARR4 = OOOA05 


mov ax, OOCDh 
call w22_23 
mov ax, OACEh 


call w22_23 
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mov ax, O5CFh 
call w22_23 


; Set ARR4 control bit in CCR1 to make ARR4 == SMM memory. Set SMI enable bit 
; and SMAC bit to allow non-CS-based data writes to go to the SM area. 


mov al, OClh 

call £22.23 

or al, 86h ; SM4=1; SMAC = 1; SMI = 1 
mov ah, al 

mov al, OClh 


; Copy SMI code to A000:0000 


xor ax, ax 

mov si, ax ; SMI code starts at offset 0 of this CS 

mov di, ax ; and offset 0 of SM memory too. 

mov ax, OAO0O0O0h ; SM memory segment 

mov es, ax 

mov cx, offset smi_code_end; Number of bytes of SM handler 

; code 

segcs_ 

rep movsb 7 Copy from EXE memory space to SM mem 
po co-------------------------------------+---------------+---+-------------------- 
; The SM handler is now in place. Disable access to SM memory leaving the SMI 


; bit set, so that SM interrupts can now occur. 


mov al, OClh 

call £22.23 

and al, OFBh ; SMAC = 0 
mov ah, al 

mov al, OClh 


; Exit to DOS 


mov ax, 04c00h 
int 21h 
END entry_point 
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A.10 Detection of a Tl Microprocessor 


Example A-6. 


;Purpose: 


, 


Itis possible, with a small amount of code, to detect if the CPU is a TI micropro- 
cessor and if the CPU is the Tl486SXL(C) family or a TI486xLC/E family. The 
following assembler code accomplishes this task. 


Detection of a Tl Microprocessor 


To detect if the CPU is Texas Instruments microprocessor, 


determine if i 


and then 
t is a TI486SXLC Family. 


;To detect if Texas Instruments: 


, 
, 
, 


, 


;To detect if T 


, 
, 
, 
, 
’ 


, 


-MODEL SMALL 
-486P 


;Values that 
CPU_Not TI 
CPU_TI486xLCE 
CPU_TI486SXLC 


TR5_Write 
TR5_Read 
CR 

LF 


- CODE 
DetectCPU 
StartDetect: 


;NOTE: 


The undefined 


following a divide. 


undefined 


flags. 


flags of the TI microprocessor remain unchanged 
An Intel part will modify some of the 


Check by saving the flags, do a divide, 


then compare the new flags with the old flags. 


I486SXLC Family: 


The cache test 


TI486xLCE due 


registers in the TI486SXLC Family differ from the 
Bit 9 in TR4 is 


to the difference in cache size. 


used to determine if the processor is of the TI486SXLC Family by 
seeing if it can be toggled. 
The code that follows is a procedure that returns the CPU detected 


in AX. 


EQU 
EQU 
EQU 


PROC 


code will return in AX: 


0 
1 
2 


; This procedure returns a value in AX. 


Value in BX is destroyed and not saved. 
; Value in top-half of EAX is destroyed. 


CLI 


AreWeTI486: 


;Assume that CPU is at least a 386 CPU. 


MOV 
CMP 


PUSHF 
POP 
MOV 


MOV 
MOV 
MOV 
DIV 
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AX, 0) 7set flags to known value 
AX, AX 
;save old flags 
AX 
flags_before, AX 
AX, dividend ; setup for DIV instruction 
DX, 0 
BX, divisor 
BX 


PUSHF 
POP 
MOV 


MOV 
AND 
MOV 
AND 


CMP 
JNZ 


WeAreTI486: 


AX 


flags_after, AX 


AX, flags_mask 
AX, flags_before 
BX, flags_mask 
BX, flags_after 
AX, BX 

NotTI 


Detection of a TI Microprocessor 


;save new flags 


;isolate bits we are interested in and compare 


;flags same before and after? 
7no — don’t have TI CPU 


;Now check to see if CPU is TI486xLCE or TI486SXLC 


MOV 
MOV 
MOV 


MOV 
MOV 
MOV 
MOV 
AND 
CMP 
JNE 


FoundTI486xLCE: 
;CPU is 
MOV 
JMP 


FoundTI486SXLC: 
;CPU is 
MOV 


EAX, 
TR4, 
EAX, 


0200h 
EAX 
R5_Write 


ERS; 
EAX. 


EAX 
R5_Read 
EAX 

EAX, TR4 

0200h 
0200h 
FoundT1I486SXLC 


a TI486xLCE 
AX, CPU_T1I486xLCE 
Done 


TI486SXLC 
AX, CPU_TI486SXLC 


;attempt to set bit 9 of TR4 


;must do write, 


;then read operation on test registers 


;read TR4 back 
;isolate bit 9 
;did it stay set? 


;no — found TI486SXLC 


JMP Done 
NotTI: 
7CPU is not a TI486 
MOV AX, CPU_NotTI 
JMP Done 
Done: 
j;leave return value in AX 
RET 
DetectCPU ENDP 
.-DATA 
flags_before DW ? 
flags_after DW 2 
flag_mask DW 08D5h 
dividend DW OFFFFh 
divisor DW Ah 
result DW 0 
END 
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A.11 Detection of SMM Capable Version 


At power-up/reset the EDX register contains device identification and stepping 
information as shown in Table A-6. 


Table A-6.EDX Register Data At Power-Up/Reset 


EDX Stepping SMM Available 
0410h A No 
0421h B Yes 


The following technique can be used to identify the stepping of a TI486SXL(C) 
microprocessor after the reset information in EDX is lost. 


The method uses two functions: the mixed C and assembler function isb() and 
the assembly language illegal opcode interrupt handler ill_op. The function 
isb() returns a 1 to indicate when a B step part is present; it returns a O other- 
wise. 


The function isb() installs an illegal opcode handler, ill_op. Then isb() sets up 
conditions to execute an SMM segment save instruction, SVDC. If an A step 
part is present, the illegal opcode handler is invoked. The ill_op process then 
modifies the return address on the stack to return to the instruction after the 
SVDC instruction. The storage location used by the SVDC instruction is then 
checked to see if it changed. If it has changed, the part being tested is a B step 


part. This detection technique must be run at privilege level 0. 


Example A-7. Detection of SMM Capable Version 


J [BRR RRR KR KKK KK KK I I I I AK I I I A I A A AA A A A A A I IK IK 
[ [RRR RRR RRR KK RK RK KK I KK OK KK EK isb Cc KEKE KKK KKK KKK KKK KK KKK KKK KKKKKKK KK KEK 


J [BRR RRR RK KK KK KK I I I I I I I I I I I I A A A A A A I AAI A I I I AK 


#define TRUE 1 
#define FALSE 0 


int old_off; 
int old_seg; 


extern ill_op(); 
J [BRR RRR KKK KK KK KK I I I I I I I I I A A A I A A I A IA IA I AIA I A 


// Function: isb () 
// Returns:1 if TI486SXL(C) B step 
// 0 if TI486SXL(C) A step 


TL [BRR RRR KK KK KK KK I I I I I I I I A I A AA A A A AA IA IIA A IAI I A 


isb () 
{ 
int i, b_step; 
char mem[10]; 
for (i=0; i<10; mem[it++]=0; 


asm { 


- 386 
extrn _ill_op:near 
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PERE ERAER REAR AKER RRR RRER CIK REISE RRR RARER, 


7****** get present illegal opcode handler 


aM FO KR AA ICL LOK LALO AE IRIE KIERAN, KLEINE AK AAA 


push 
push 
mov 
int 
mov 
mov 
Pop 
Pop 


es 
bx 

ax, 3506h 
21h 
old_seg, es 
old_off, bx 
bx 

es 


FERRE ERE RE LAKE KAR RAEI ERE LAKE LAK KL KEK EK SEK 


7**x*** install new illegal opcode handler 


PERE ERARE REAR ARR ER EE A AIRE ERA LR REAR LOR RR RARER, 


push 
push 
push 
mov 
mov 
mov 
mov 
int 
Pop 
Pop 
Pop 


dx 


bx 


ds 
ax, 2506h 
dx, OFFSET _ill_op 


bx, cs 


ds, bx 


char save_ccrl, save_cf, save_ce, save_cd; 


ie A PII A A RE AA IRE FER AIA A EIA IK ICL ARIK LEAK, FRNA ICR IER ZBI RL A ICRA, RI BM 


p***k*k*k* Set SM4 and SMAC and SMI bit to allow SMM instructions 


FREES RARER BELL BRIA BARA LR ICAI ERED IR RAIL CRB ARE RAK BRA ROR INR: 


mov 
out 


al, Oclh 

22h, al 

al, 23h 

byte ptr [save_ccrl, al 
al, 86h 

ah, al 

al, Oclh 

22h, al 

al, ah 

23h, al 


Se IA Ae AISA A SALE A AIEEE DED AIC ZR RARE HN BIE DER LOSE ASE ASAE AIA K 


7****** Setup nonzero SMM region 


RRA ELAR EAE EB BIKA KEK L ENE AAA EIR BRL LIK ERK ORK 


mov 
out 
in 

mov 
mov 
out 
mov 
out 


al, Ocfh 
22h, al 
al, 23h 
byte ptr [save_cf], al 
al, Ocfh 

22h, al 
al, 1 
23h; ad, 
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PER IER REIR TE RRA RE SR IEE RNR RA RRR NRK RIS HR HAR RK, 


7*x***k* Set SMM region to the top of memory to 
7****** avoid overlapping with this program 


pREKRERE RER EK EK RE EER EKER EK ERK ERK IKK EAE ER EKA KK 


mov al, Ocdh 
out 22h, al 
in al, 23h 
mov byte ptr [save_cd], al 
mov al, Oceh 
out 22h, al 
in al, 23h 
mov byte ptr [save_ce], al 
mov al, Ocdh 
out 22h, al 
mov al, Offh 
out 23h, al 
mov al, Oceh 
out 22h, al 
mov al, Oh 
out 23h, al 
mov al, Ocfh 
out 22h, al 
in al, 23h 
and al, Ofh 
out 23K, «ad 


7***x*x** Flush prefetch after changing configuration 
jmp $+2 


PIR EEK RRER ER KARRI HKALE EAA IER IKI KB ARK K HK 


;****** Execute SMM instruction sav_seg 
[EERE ERIE REESE SEERA EAM HK RK RIOR IIE IIR KDR OR RIK 
;Sav_seg word ptr mem, ds 
Word ptr mem == ss: [bx] 
lea bx, mem 
db 36h Ofh 78h 1fh 


PERI A ROAR RI LOI, BIRR EHR NRA K eR IA ACN RG OR, ARIK 


7*****k* restore configuration registers 


PERE ERE EK RARER SEAR ASAE IRK IER LB AAR EK 


mov al, Ocdh 

out 22h, al 

mov al, byte ptr save_cd 
out 23h, al 

mov al, Oceh 

out 22h, al 

mov al, byte ptr save_ce 
out 23h, al 

mov al, Ocfh 

out 22h, al 

mov al byte ptr save_cf 
out Zan, al 

mov al, Oclh 

out 22h, al 

mov al byte ptr save_ccrl 
out 23h, al 
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PEER ERAER EEA RRA RIECK RRR CARRERE ELK RRR REAR, 


7****** restore old illegal opcode handler 
aM PORE A KAA AIR LER LE RAL AE ALAR IER AAD LEANER RFE 


push dx 

push bx 

push ds 

mov ax, 2506h 

mov dx, OFFSET old_off 
mov bx, OFFSET old_seg 
mov ds, bx 

int 21h 

pop ds 

pop bx 

pop dx 


) // isb asm region 


for (i=0, b_step=FALSE; i<10; ++i) 
if (mem[i] != 0) 
{ 
b_step = TRUE; 
break; 


} 


return (b_step); 
} // isb () 


RARER AKAK REAR ARR ER bad_op.asm KKK KKK KK KKKKKKKKKKKK KKK 


public _ill_op 


assumecs:_TEXT 


x 


jes 


_TEXT segment byte public ’COD 
_ill_op proc near 


pop ax 
add ax, 5 
push ax 
iret 


_ill_op endp 
_TEXT ends 


end 
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A.12 Format of Data Used by SVDC/RSDC Instructions 


The SVDC/RSDC instructions change limits and read/write access privilege 
levels of the application and System Segment Descriptor registers before they 
are used by SMM code (see Table 2—7, page 2-22). The instructions use a 10 
byte area composed of two major portions of the System Address register set 
(see Figure 2—7 on page 2-17) value/contents, and the invisible internal des- 
criptor format shown in Example A-8. Example A-9 (page A-33) loads a real- 
mode system segment (SS) descriptor and invisible region values. 


System Segment-Descriptor registers are described in Subsection 2.5.2.2, 
Descriptors, page 2-21. 


Example A-8._ Internal Descriptor Format 
| Segment Register Descriptor <8 bytes>|Segment Register Selector <2 bytes> | 


71) Segment Register Selector: This is the segment if the segment register 
;was loaded in real mode or the selector if the segment register was 

; loaded in protected mode. In real mode, this is also equal to the segment 
;base divided by 10h and clipped to 16 bits. 


dw |Selector or Segment | 
72) Segment Register Descriptor, which is the actual descriptor if the 


;segment was loaded in protected mode, or a pseudo-descriptor if the segment 
;register was loaded in real mode. 


dw | Limit [15:0] | 

dw | Base [15:0] | 

dio | Base [23:16] | 

db | p | DPL | 1 | DscTy[2:0] | A | ; DscTy is descriptor ;type (DT) 
db lc | D | x | AvL | Limit [19:16] | 

db | Base [31:24] | 
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Example A-9. Load SS Descriptor Values (Real Mode) 


;Load SS descriptor with values appropriate to 


;REAL mode. 


INCLUDE SM.MAC 


old_val 


real_mode: 


sav_seg 
rst_seg 
mov 
mov 


dt ‘i ; 
dw Offffh ; 
dw 0 ; 
di 0 ; 
db 10010011B 
db 0 ; 
db 0 ; 
dw 0 ; 


[old_val], ss 
ss, [real_mode] 
ax, cS 
ds, ax 


see Example A-3 page A-14 


location to store old ss value 


limit 
base 
base 
; 93h, data segment 
G=0, D=0, upper limit=0 
high portion of base 
selector/segment 
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A.13 Altering SMM 
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Code Limits 


When the CPU acknowledges an external SM interrupt and switches into sys- 
tem management mode, the CPU is put into real mode. Section 2.8.5, SMI Ser- 
vice Routine Execution on page 2-54, states that the Code Segment register 
is loaded with the base and limits defined by the ARR4 register. If the defined 
SMM address space is a 16K region, the CS segment limit will be 16K. This 
is a contradiction to the normal segment limit of 64K for real mode. 


This does not normally cause the programmer any problems, since the CS 
register can access any address in the SMM address space. The only time this 
can become a problem is if the SMM code jumps to code outside the SMM ad- 
dress space. An example of this might be jumping to a BIOS routine to save 
a block of memory to the disk drive. The BIOS routine might expect the CS 
code segment limit to be 64K, and might require it to be, depending on the off- 
set of the routine or any routine it calls. The BIOS procedure might be at offset 
38416 of the BIOS segment, for example. If, as stated above, our SMM limit 
is 16K, then the CPU would generate a segment overrun fault when it at- 
tempted to jump to offset 38416 of the BIOS segment. 


There are several solutions to this problem. One solution is to never execute 
code outside of the SMM space. Another solution is to have an SMM space 
of 64K or larger so that the CS code segment limit is 64K or more. The third 
solution is to change the CS limits while in the SMM code. 


When in real mode, the hidden portion of the Segment registers are not acces- 
sible to the programmer, unlike in protected mode. With the new SMM instruc- 
tion RSDC, acomplete 80-bit Segment register and descriptor cache entry can 
be read from memory into a Segment register, thus changing the segment lim- 
its and attributes, even when in real mode. This could be done to make the DS 
segment have a 4G-byte limit, enabling real mode SMM code to access all of 
memory with a 32-bit offset, without ever leaving real mode. However, the 
RSDC instruction will not work with the CS register. The only way to change 
the limits of the CS segment is to switch to protected mode, do a far jump to 
a segment descriptor that has the desired segment limit and attributes, and 
switch back to real mode. 


To do this, several things must happen: 


1) Setup aGDT with at least one valid entry (this entry is a descriptor for the 
destination code segment for the intersegment jump). 


2) Save the old GDTR register contents (using SGDT), and load the register 
to point to the new table (using LGDT). 


3) Save the old CRO value, and switch into protected mode with paging off. 


4) Doan intersegment jump to the code segment in the GDT, thus changing 
the CS segment limit. 


5) Restore the CRO value, which switches back to real mode. 


6) Restore the saved GDTR value. 


Testing/Debugging SMM Code 


A.14 Testing/Debugging SMM Code 
There are several ways to debug SMM code: 


(i Emulation Technology Tl486SXLC microprocessor pod with an HP™ 
16500/550 Logic Analyzer that provide: 
m Support for selective trace capture 


m= SMM instruction disassembly 


(1 Periscope (software only) that provides: 
m Full screen debugging 
m TSR 
Mm Single stepping and break points 


(1 DOS debug (software only) that provides: 
m Single stepping and break points 


[j Other selected logic analyzers 


A.14.1 Software Only Debugging 


It is possible to write an SMI handler and debug it as a TSR. Use a debugger 
that can set break points at any address in memory. Use the following code 
sequence, shown in Example A—10, as amodel of how to build the SMI handler 
as a TSR. This code sequence also contains a section that loads the CS sec- 
tion invisible to programmers to change the limit. This is required so that a 
protection error does not occur when code is executed outside the SMM re- 
gion. It is assumed that ADS# and SMADS# from the CPU are ORed together 
by the chipset or external logic. Also, the chipset should support program- 
mable SMM locations. 


The code sequence marks the SMI handler address in the user interrupt INT 
66 location (0:198h). This lets the programmer determine the location of the 
SMM region and set break points. 


The debugger is able to set a code break point outside the SMI handler using 
INT 3 only. This is because the Debug (control) register DR7 is set to the reset 
value upon entry to the SMI handler. This causes break conditions in DRO-3 
to be disabled. Debug registers can be used if they are set after entering the 
SMI handler and saving DRO-3. 


Using a TSR to debug SMI has some limitations: 


[J Other code could overwrite the region. 


Lj Jumps or calls must be to known offsets. 
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A.14.2 Software Debugging Example 
Example A-10 can be used for the first step in debugging SMI code. 


Example A-10. Debugging SMI Code 


-MODEL SMALL 

- STACK 

.386P 

INCLUDE SM.MAC 


RD_WR EQU 12h ; read/write 
EX_RD EQU 1Ah ;execute/readable 
COMMENT * 


This is an example of SMI code which can exist below the 1 MByte boundary. It must be 
before the 1 MByte boundary because it uses the value in the cs register in order to 
form fixups based on its location as well as to jump to return to real mode. 


Aa 


- CODE 


smi_handler: 


jmp Sover ;pass data area for assembler 
db 100 dup (?) 
stacksmilabel 


, 


;our smi handler gdt 


gdt dq 0 pnull 
ADDR = 0 
LIMT = 100000h 
g_big = $ - gdt 
dw (LIMT-1 and Offffh) 
dw (ADDR and Offffh) 
db ((ADDR SHR 16) and Offh) 
db RD_WR OR (0 SHL 5) OR (1 SHL 7) 
db (((LIMT-1) SHR 16) AND Ofh) OR (0 SHL 6) OR (1 SHL 7) 
db ((ADDR SHR 24) and Offh) 
g_code = $-gdt 
ADDR = 0 
LIMT = 100000h 
dw (LIMT-1 and Offffh) 
dw (ADDR and Offffh) 
db ((ADDR SHR 16) and Offh) 
db EX_RD OR (0 SHL 5) OR (1 SHL 7) 
db (((LIMT-1) SHR 16) AND Ofh) OR (0 SHL 6) OR (1 SHL 7) 
db ((ADDR SHR 24) and Offh) 
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GDTSIZE 


csareadb 
dsareadb 
ssareadb 
esareadb 
fsareadb 
gsareadb 
tsareadb 


($-gdt) 


10 
10 
10 
10 
10 
10 
10 


gdtsave df? 


gdtnewdw 


eaxsave 
ebxsave 
ecxsave 
edxsave 
espsave 


Sover: 
COMMENT 


The debugger may want to use ss,ds,es,fs,gs. 


gram had been running in protected mode. We therefore extend the limits of these reg-— 


dd 
dd 
dd 
dd 
dd 


A 


GDT 
dd 


Vy VY 


dup 
dup 
dup 
dup 
dup 
dup 
dup 


YY Vv YN YN VD 


SIZE - 1 
e 
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j;address 


isters before we enable the debugger. 


A 


sav_seg [ss 
sav_seg [ds 
sav_seg [es 
sav_seg [fs 


sav_seg [gs 


mov cs: 


mov cs: 


mov cs: 


COMMENT 


Clear VM flag in Eflags 


a 


A 


area],ss 


,as 
7,es 
Z£s 
area],gs 

[eaxsave],eax 


area 
area 


] 
] 
] 
] 


area 


[ebxsave],ebx 
[espsave],esp 


rst_seg ss, [gdtt+tg_big] 


mov esp 
mov ax, 
mov ss, 
mov eax 
push eax 
mov eax 
push eax 
push eax 
iretd 


@@: 


sgdt fwo 


;save the stack pointer 


(See Section A.14.3). 


, offset smistack 


cs 
ax 
, O 


, cs 
, offset @F 


rd ptr cs: [gdtsave] 
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COMMENT * 
fixup code for smi base 


a 


;ypatch gdt 


mov 
shl 
mov 
add 
mov 


eax,cs ;segment of us here 
eax, 4 

ebx,offset gdt ,offset to here 
ebx, eax 

dword ptr [gdtnew+2],ebx ;define gdt base 


;patch far jump into protected mode 


mov 
add 
mov 


ebx,offset Snext0 
ebx, eax 
dword ptr cs: [patchl],ebx 


;patch far jump back to real mode 


mov 


start here 


COMMENT * 
extend the limits for the code segment 


patchl 


Snexto0: 


patch2 
Snextl: 
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word ptr cs: [patch2],cs 


66h 

fword ptr [gdtnew] 
eax, cro 

al, 

cr0,eax 

66h 

Oeah 

? 


g_code 


bx, g_big ;extend the limits of the data segments 
ss,bx 

ds,bx 

es,bx 

fs,bx 

gs,bx 

al,1l 

cr0,eax ;back to real mode 

Oeah 

offset S$nextl 

? ;far jump to set cs and writable bit 
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COMMENT * 


define a valid stack 
a 


mov ax,Ccs 

mov SS,ax 

mov esp,offset stacksmi 
COMMENT *% 


xxxxx* Insert user specific smi code here & set breakpoints. ****** 
a 

db 66h 

lgdt fword ptr cs: [gdtsave] 

rst_seg ss, [ssarea] 


rst_seg dsarea] 


ds, [ 
rst_seg es, [esarea] 
rst_seg fs, [sarea] 
rst_seg gs, [gsarea] 

mov eax,dword ptr cs: [eaxsave] 

mov ebx,dword ptr cs: [ebxsave] 

mov esp,dword ptr cs: [espsave] 

exit_sm 
smi_handlere: 
SMI_SIZE = offset smi_handlere - offset smi_handler 


Install PROC 


;***** Enable SMM Region ****** 


; Don’t enable SMI yet because we’re not ready for it. 


mov al, Oclh ;select CCR1 

out 22h,al 

in al, 23h ;read CCR1 

or al, 80h ;enable SMADS# and SMM region (not SMI) 
mov ah, al 

mov al, Oclh ;select CCR1 

out 220 al. 

mov al, ah 

out 23h, al ;write new CCR1 value 
mov eax,offset endresident 

mov ebx,cs 

shl ebx, 4 

add eax, ebx 

add eax, 0fffh 

and eax,NOT Offfh ;eax = start of smi space 
mov edx, eax 


push edx 
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FIERO RICK LER IRIEL LAIR LORIE IK LK ILI ALEK, DOR OK LEI FLOR AIL IOS LEKI BLOKE IE LEK AR LOR RISER AR LORE EIR RIOR. 


; * Load SMI address and size into ARR4 


REESE cd ce cf 
MOTOR RIF ES rc ed Fa ie ce delete?” eo ah Ba Re a a a pk Seg = Oy se Seep ay ge eas ik ak be 
purene® Config Reg 31-28 27-24, 23-20 19-16, 15-12 <size> 
7 **xx*** Address 31-28 27-24, 23-20 19-16, 15-12 11-8, 7-4 3-0 
mov al, Ocdh ;region 4 1st word 
out 22h, al 
mov eax, edx ;get smi handler address 
shr eax, 24 ;move address <31-24> to al 
out 23h, al ; [7-0] =>smbase [31-24] 
mov al, Oceh ;region 4 2nd word 
out 22h; al 
mov eax, edx 7get smi handler address 
shr eax, 16 ;move address <23-16> to al 
out 23h, al ; [7-0] =>smbase [23-16] 
mov al, Ocfh ;region 4 3rd word 
out 22h, al 
mov eax, edx 7get smi handler address 
shr eax, 8 ;move address <15-12> to al 
and al, Of0h ;clear bottom nibble 
or ety) ;select 4KB SMI size 
out 23h, al ;and [3-0]=>smsize 
io Ae IIE HOR IEA, FAA IER IK, HALL HER IE LONI, RAK LL HELIS LAS LAN LISA SRR SLE TERK AER LER LEK IRR 
pop edx ;start of smi area 
mov eax, edx 
add edx,1000h ;reserve 4k for smi handler 
mov ebx,es ;current psp 
shl ebx, 4 : 
sub edx, ebx ;bytes to reserve 
she edx, 4 ;paragraphs to reserve in dx 
push dx 
shr eax, 4 ;paragraph of smi handler 
mov es,ax ;save for later 
mov ds,ax 
mov dx, 0 ;always starts at 0 
mov ax, 2566h j;int 66h vector at 0:198h 
int 21h 
pop dx ;tsr address 
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;move the code to the smi_area 


mov al, Oclh ;select CCR1 

out 22h, al 

in al, 23h ;read CCR1 

mov ah, al ;save old value 

mov al, Oclh ;select CCR1 

out 22h, al 

mov al, ah ;get old value 

or al, 04h ;enable SMAC 

out 23h,al j;be clean on ah for later 


RELOCATE = 0 
IF RELOCATE 


sub esi,esi 
sub edi,edi 
mov cx,cs 
mov ds,cCx 
mov ecx, (SMI_SIZE+3) /4 
rep movs dword ptr es: [edi],dword ptr ds: [esi] 
ELSE 
;put the far jump at the start of the smi_area to above code 
mov byte ptr es:[0],0eah 
mov word ptr ex:[1],offset smi_handler 
mov word ptr ex:[3],cs 
ENDIF 
;restore smi state and enable SMI 
mov al, Oclh ;select CCR1 
out Zon, ak 
mov al, ah ;get old value 
or al, O2h ;set SMI bit to enable SMI 
out 23h,al j;be clean on ah for later 
COMMENT *% 


SMIs may happen at any time now. 
a 


;dx = offset in this segment to tsr 


mov ax, 3100h ;Request function 31h, error code=0 
int 21h ; Terminate-and-Stay-—Resident 
Install ENDP 
j----end of resident code---- 
endresident label byte 


db 2000h dup (?) 


END Install 


ip EKER AKL RAK HEAR ICR AK EK LR LHI EAB, EAA KICK EK BLAKE ARIK AR LAL BAK EK KLE AK, KAKA ALK BEAK 
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A.14.3 Clearing the VM Flag Bit 


If the CPU is in V86 mode and is interrupted by an SMI, the VM bit in the 
EFLAGS register is not cleared as it should be during real-mode operation. Not 
clearing this bit can cause protection errors of valid instructions that are being 
executed in the SMI handler. This can be resolved by adding the following code 
after saving all used registers: 


rst_seg ss, [gdtt+g_big] ; change ss limit to 4 Gbytes 
mov esp, offset smistack ; create new stack pointer 
mov ax, cS 
mov SS, ax 7 new stack segment 
mov eax, 0 
push eax ; flags after iretd 
mov eax, CS 
push eax ; segment after iretd 
mov eax, offset @F 
push eax ; offset after iretd 
iretd 

@@: 


See the debugging example in Section A.14, Testing/Debugging SMM Code, 
for usage of this code. 
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BIOS Modifications Guide 


To reap full benefit from the Tl486SXL(C) family of microprocessors, the sys- 
tem BIOS should be modified to support the internal registers that control the 
on-chip cache, clock doubling, and other features. This appendix serves as a 
guide to some of the changes that need to be considered, and includes sample 
assembler code for controlling the cache. 


The following three topics are discussed regarding the internal cache registers 
and clock double enable: 


_j Power-up and hard reset 


_j Protected-mode to real-mode switching 


LJ Soft reset— (CONTROL) (ALT) (DELETE ) 


Ineach case, the state of the CPU cache registers and the clock-double enable 
bit must be known to determine when and how to change their values. 


Note: 


The final responsibility for verifying designs incorporating TI486SXL(C) 
microprocessors rests with the customer originating the motherboard 
design. 


Topic Page 
B.1 Differences Between the TI486SLC/DLC BIOS and 
thesl486SXE(C) BIOS Hee erctrce eters cisvenercversretrccretmerevevefetarsies es B-2 
B.2 Power-Up and Hard Reset .......... cc cece eee e eee e eee ene eeee B-3 
B.3 Protected-Mode to Real-Mode Switching ................0eeeeees B-3 
B.4 Soft Reset—CONTROL-ALT-DELETE ...............-:02220eeeees B-4 
B.5 Turning the Internal Cache On and Off ..............2-22000000e: B-4 
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Differences Between the Tl486xLC/E BIOS and the TI486SXL(C) BIOS 


B.1 Differences Between the TI486SLC/DLC BIOS and the TI486SXL(C) BIOS 
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The TlI486SLC/DLC BIOS requires some modifications to support the new fea- 
tures of the TI486SXL(C) family of microprocessors. 


If the BIOS currently tests the internal cache before enabling it, the test routine 
requires modification. Due to the larger size of the Tl486SXL(C) cache, the 
cache test registers have changed from those in the TI486SLC/DLC. (See 
Table 2-17 on page 2-36.) It is unnecessary to test the TI486SXL(C) cache 
before enabling it during the boot process. 


In addition to changing the cache test registers, the cache organization selec- 
tion bit has been redefined. In the Tl1486SLC/DLC, configuration control regis- 
ter 0 (CCRO) bit 6 is used to select between a direct-mapped and a two-way, 
set-associative, internal cache organization. For the Tl486SXL(C) family, the 
cache is always two-way set associative and CCRO bit 6 is defined to enable 
clock-doubled mode. BIOS prepared to support the TI486SLC/DLC can allow 
the user to select the cache organization, but BIOS prepared for the 
TI486SXL(C) should comprehend that the cache-organization selection is not 
available. 


If the BIOS supports software clock switching, a modification to support clock- 
doubled feature may be desirable. Switching to high-speed mode should en- 
able bit 6 of CCRO and thus put the CPU in clock-doubled mode. Switching 
down the CPU speed should disable bit 6 of CCRO and put the CPU in 
nonclock-doubled mode. If the BIOS is APM (advanced power management) 
compliant, the use of 1x and 2x modes should be implemented as well. 


Se 0 — a_— —_—a——a—_V€—_—wam__— —__(@_—aouauaua6 a a 6 5 60 


Note: 


When the Tl486SXL(C) is in clock-doubled mode, the CLK2 input must not 
be scaled or stopped. First, the processor must be placed in nonclock- 
doubled mode; then, the CPU clock speed can be changed. 


| | 


When the Tl486SXL(C) family microprocessors are reset, the cache and the 
clock-doubled features are disabled by default. 


Power-Up and Hard Reset / Protected-Mode to Real-Mode Switching 


B.2 Power-Up and Hard Reset 


During power-up and hard reset, the operating system (OS) is booted up. Due 
to the reset line to the CPU going active, the internal cache and the clock- 
doubled feature are disabled, making the CPU act similar to a 386. If the cache 
and the clock-doubled feature are enabled prior to the reset, they must be 
turned on at some point before the OS is booted. A convenient time may be 
during final chipset initialization, understanding that the cache should remain 
off during memory sizing. Many BIOSs provide the user an option to disable 
the system cache using the setup screen. Because most user cache-control 
options are stored in nonvolatile RAM, the flag responses and potentially other 
flags should be checked before turning the cache on. 


B.3  Protected-Mode to Real-Mode Switching 


Protected-mode to real-mode switching can be implemented to handle cases 
where the OS has been booted, applications are running, and the CPU needs 
to be reset from protected to real mode. The object is to switch CPU modes 
and jump back into the OS or application at some saved return address. 


When the CPU is reset, the internal cache and the clock-doubled feature are 
disabled. Before returning control to the application, the cache and clock doub- 
ling should be turned back on, but only if they were enabled before the reset 
occurred. This is accomplished by checking the cache-enable flag in the non- 
volatile RAM to see if the user enabled caching from the setup screen. Howev- 
er, if the BIOS allows the user to turn off the cache by a hot-key combination 
(perhaps as part of speed switching), other checks may need to be performed 
to see if the cache should be turned back on. 
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B.4 Soft Reset 


Execute soft reset by pressing (CONTROL) (ALT) (DELETE). The objective of a soft 
reset is to reset the system and reboot the OS. The action is similar to power- 
up and hard reset, but a hard reset of the CPU is not generated. Thus, the 
CPU's internal cache and clock doubling are not disabled. Since the cache is 
not disabled, this soft reset can negatively impact memory-sizing code, such 
as generating memory-size mismatch errors. In this situation, disable the inter- 
nal cache and enable it prior to booting if it was enabled by the user in setup. 


B.5 Turning the Internal Cache On and Off 
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When the TI1486SXL(C) family of microprocessors internal cache is turned on 
or off, the following guidelines should be observed in the order presented: 


1) Turn off interrupts—CLI 


2) Turn off cache using Control Register 0 (CRO) bit 30 and flush using 
WBINVD 


3) Manipulate cache registers 
4) Turn on cache and flush using WBINVD 
5) Turn on interrupts—STI 


This sequence ensures that the process is not interrupted until complete and 
that no cache coherency issues arise when the cache is turned back on. When 
manipulating the cache registers, set each register explicitly instead of relying 
on default values. 


Turning the Internal Cache On and Off 
Example B-1 shows assembler code for turning the cache off. 


Example B-1. Turning Internal Cache Off 


CacheOut MACRO index, value 
MOV AL, index 
OUT 22h, AL 
MOV AL, value 
OUT 23h, AL 


CacheOut ENDM 


CLI 

MOV EAX, CRO 

OR EAX, 40000000h ; set bit 30, turn off cache 
MOV CRO, EAX 

WBINVD ; for external cache coherency 
CacheOut 0COh, 00h 

CacheOut OC1h, 00h 

CacheOut 0C4h, 00h 

CacheOut OC5h, 00h 

CacheOut OC6h, OFh 

CacheOut OC7h, 00h 

CacheOut O0C8h, 00h 

CacheOut OC9h, 00h 

CacheOut OCAh, 00h 

CacheOut OCBh, 00h 

CacheOut OCCh, 00h 

CacheOut OCDh, 00h 

CacheOut OCEh, 00h 

CacheOut OCFh, 00h 

WBINVD 

STI 

MOV EX, 4co00h 

INT 21h ; return to DOS 
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Turning the Internal Cache On and Off 


Turn on the microprocessor internal cache by modifying some of the register 
values as shown in Example B—2. The CacheOut macro definition remains the 
same. 


Example B-2. Turning Internal Cache On 


CLI 
MOV 
OR 

MOV 


WBINVD 


Cac 
Cac 


Cac 
Cac 
Cac 


Cac 
Cac 
Cac 


Cac 
Cac 
Cac 


Cac 
Cac 
Cac 


MOV 
AND 
MOV 


heout 
heout 


heoOut 
heoOut 
heout 


heoOut 
heoOut 
heoOut 


heout 
heoOut 
heoOut 


heoOut 
heoOut 


heoOut 


WBINVD 


STI 
MOV 
INT 
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EAX, CRO 
EAX, 40000000h ; set bit 30, turn on cache 
CRO, EAX 
; for external cache coherency 
OCOh, 23h ; set bits NC1, NCO, BARB 
OCih, 00h 
0C4h, 00h 
OC5h, 00h 
OCé6h, 00h 
OC7h, 00h 
OC8h, 00h 
OC9h, 00h 
OCAh, 00h 
OCBh, 00h 
OCCh, 00h 
OCDh, 00h 
OCEh, 00h 
OCFh, 00h 
EAX, CRO 
EAX, NOT 40000000h 
CRO, EAX ; Clear CD bit 


EX, 4C000h 
21h ; return to DOS 
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Design Considerations and Cache Flush 


This appendix discusses design considerations, address bit A20 masking, and 
general cache invalidation procedures. 
aT | 
Note: 

The final responsibility for verifying designs incorporating TI486SXL(C) 
microprocessors rests with the customer originating the motherboard 


design. 
nd 
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Design Considerations 


C.1 Design Conventions 


C-2 


Following these conventions to connect the Tl486SXL(C) terminals to the 

PCB: 

1 Connect (short) all Voc terminals to the positive supply voltage. 

1 Connect (short) all Vgg (GND) terminals to the system ground. 

L1 For the TI486SXL in the 144-pin package connect (short) both W/R# ter- 
minals (terminals 36 and 37) together and connect to W/R# signal source. 

[j Leave electrically open (unconnected) all NC terminals. 


Note: 


Connecting or terminating (high or low) any NC terminal(s) can cause 


unpredictable results or nonperformance of the microprocessor. 
ee | 


Address Bit A20 Masking 


C.2 Address Bit A20 Masking 


The A20M, address bit 20 mask, is an anomaly in PC designs resulting from 
the fact that truncated addresses can be generated by an 8086/8088 outside 
the physical address range of Oh-FFFFFh. For example, an 8086/8088 sys- 
tem that contains FFFFh in a segment register and OFFFh in an offset register 
results in an address of 100FFEh that requires 21 bits to address. Since the 
8086/8088 has only 20 address bits (AO—A19), the most significant bit of the 
resultant address would need to appear on an A20 bit if the 8086/8088 had 
one. 


Since the 8086/8088 address bus is not wide enough, only the first 20 bits of 
the address are seen by the system. Using the address 100FFEh, generated 
in the previous example, the 8086/8088 system read/write address is per- 
formed at location FFEh and not at 100FFEh. The 80286 and later micropro- 
cessors implement at least 24 address bits and perform the read/write to ad- 
dress location 100FFEh. Thus, software applications can produce different re- 
sults when run on an 8086/8088 system versus an 80286 or later microproces- 
sor system. 


Systems that use 80286 or later microprocessors compensated for this anom- 
aly by adding circuits to generate an A20 mask (referred to as the A20 mask 
or the A20 gate, or similar). The A20 mask consists of software-controlled logic 
that forces a zero onthe A20 address line regardless of the actual value of A20. 
The software-controlled A20 mask can also permit the true value to be passed 
to the system when required. 


Note that the A20 mask logic is external to the processor in both 80286 and 
80386 designs. The processor generates the actual address but the system 
logic can be set to ignore or not ignore the A20 pin. Normally, the A20 pin is 
ignored when these processors are executing in real mode and emulating an 
8086/8088. 


This is an important consideration when replacing an 80386SX/DX device with 
a T1486-type device. The Tl486SXL(C) microprocessors implement an inter- 
nal cache, and, if the system is in a state that ignores the A20 address input, 
the processor must know so that it can also ignore the A20 address input. 


If the A20M bit of configuration control register 0 (CCRO) is set, the 
Tl486SXL(C) microprocessor knows that the A20M input provides the true val- 
ue required. However, if the TI486SXL(C) is inserted into a socket designed 
for the 80386SX/DX, the Tl486SXL(C) A20M pin is placed at a pin location that 
is not used by the 80386SX/DX. The system hardware needs to be modified 
to provide the A20M connection. 


The NCO bit of CCRO is a software-only solution to the A20 mask function. 
When set, the T1486SXL(C) microprocessor does not cache the first 64K bytes 
of memory above each 1M byte boundary. This solution means that, even if 
the value of the A20 address is not known, the processor does not cache data 
to the affected addresses. 
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C.3 General Cache Invalidation 


When the FLUSH bit in configuration control register 0 (CCRO) is set, the 
FLUSH# input, when asserted low, invalidates the contents of the 
Tl486SXL(C) internal cache. This can be used to assure that data stored in the 
TI486SXL(C) internal cache does not differ from data stored in system 
memory. Additionally, the cache can be invalidated by execution of the 
486-compatible invalidate instructions (INVD,WBINVD) or in response to a 
hold acknowledge state if the BARB bit in CCRO is set. The method chosen 
for invalidating the Tl486SXL(C) internal cache can be different, depending on 
whether the system has a serial secondary cache. Invalidation methods are 
described for systems with and without a serial secondary cache. 


C.3.1 Systems With No Secondary Cache or With a Parallel Secondary Cache 


When the only cache memory in the system is the Tl486SXL(C) internal cache, 
or when the secondary cache has a parallel (or look-aside) architecture, there 
are two general methods of invalidating the cache and maintaining cache co- 
herency. 


C.3.1.1. Invalidation Method 1 


Invalidate the Tl486SXL(C) cache every time the CPU enters a hold state. By 
setting the BARB bit in CCRO, automatic cache flush occurs when the 
TI486SXL(C) is placed in a hold state. If the chipset does not support hidden 
refresh, very frequent cache invalidation may occur since the CPU is placed 
in hold during DRAM refresh cycles that occur approximately every 15 us. If 
the chipset supports hidden refresh, this may be an acceptable solution since 
the cache is only invalidated during DMA or bus master reads from or writes 
to memory. 


C.3.1.2 Invalidation Method 2 


Invalidate the Tl486SXL(C) internal cache when a DMA or bus master writes 
to system memory. The external hardware must drive the TI486SXL(C) 
FLUSH# or MEMW#t input when DMA or bus masters are detected writing to 
system memory. This can be done using one of the circuits shown in 
Figure C—1 or Figure C-2. 


Figure C—1 shows the circuitry needed to generate an active-low FLUSH# to 
the CPU each time a hold state is entered (defined by HLDA = 1) and memory 
write occurs (defined by MEMW# = 0). 


Figure C—1.Cache Invalidation for the Tl486SXLC and the 132-pin Tl486SXL 


C-4 


TI486SXLC and 
132-Pin TI486SXL 


MEMW# 
(from ISA bus) 
HLDA lege FLUSH# 


( from CPU) 


t MEMWé# input is implemented on the 144-pin and 168-pin TI486SXL only. 


General Cache Invalidation 


The 144-pin QFP and 168-pin PGA versions of the Tl486SXL have the 
external hardware shown in Figure C—1 incorporated on chip. There- 
fore, to maintain cache coherency in these two devices, connect the 
MEMW4# signal from the ISA bus to the MEMW# input as shown in 
Figure C-2. 


Figure C—2.Cache Invalidation for the 144- and the 168-Pin TlI486SXL 
144- and 168-Pin TI486SXL 


MEMW# MEMW# 
(ISA) (Internal pullup) 


C.3.2 Systems With a Serial Secondary Cache 


Inasystem with a serial (or look-through) secondary cache, flushing the cache 
cannot be accomplished by setting the BARB bit in CCRO. Bus arbitration oc- 
curs between the serial cache controller and the system, allowing the CPU to 
continue executing out of cache. 


The secondary cache controller arbitrates the bus among itself and DMA con- 
trollers or bus masters and asserts HLDA to the chipset when the bus has been 
granted. Each time a DMA or bus master write is detected, the FLUSH# pin 
on the TlI486SXL(C) must be asserted. The circuit shown in Figure C-3 can 
be used. Note that the HLDA signal is generated by the secondary cache con- 
troller rather than the CPU. This is the preferred solution since, in many cases 
with secondary serial caches, the CPU is not put in hold so it can continue 
execution from cache while DMA or bus-master activity occurs on the system 
bus. 


Figure C—3. -FLUSH# Logic With a Serial Secondary Cache 
TI486SXL 144- and 168-pin only 


oe es ever eer eee eee Ste tee Sere ee 


' Pin 66 
‘(no connection) 


MEMW# > 
(From ISA) FLUSH# 


HLDA 
(From Cache Controller) 
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Appendix D 


OEM Modifications for 168-Pin CPGA 


This appendix describes the potential modifications an original equipment 
manufacturer (OEM) needs to implement on an existing 486SX/DX mother- 
board to take advantage of the TI486SXL 168-pin CPGA. This package offers 
OEMs added flexibility in implementing solutions that support various 486 
CPUs with the same motherboard. 


The pinout of the TI486SXL 168-pin CPGA is nearly identical to the Intel™ or 
AMD™ 486SX CPGA pinout. The NC pins on the TI486SXL package that 
match signal pins on the 486SX have no internal connection and can be left 
connected to the 486SX signal pins when the board is configured as a 
TI486SXL board. This greatly simplifies the interface for the OEM. The classes 
of board designs covered are listed in the topic index below. 


The board design requires the use of system logic that supports the Intel/Ad- 
vanced Micro Devices 486 interface and the TI486SXL interface. Since board 
modifications for TlI486SXL support are system-logic dependent, the imple- 
mentation details are left to the board designer.The design examples show 
both required and optional jumper connections that can be made if the func- 
tions associated with them are needed. None of the optional signals require 
termination if not used. 


Subsection D.5, Power Planes for 3.3-V and 3.3-V/5-V Systems Using 
Tl486SXL or 486DX4 on page D-9, shows 2 system implementations: 


Lj) A3.3-V system that supports a 5-V ISA and a 3.3-V VL bus. 
Li Amixed 3.3-V/5-V system that supports a 5-V ISA and a 5-V VL bus. 


In both implementations the microprocessor runs at 3.3 V. 


Note that you have the final responsibility for verifying designs incorporating 
any version of a TI486SXL microprocessor. 


Topic Page 
D.1 Boards Supporting TI486SXL and Intel................0 cee eee D-2 
D.2 Boards Supporting TI486SXL and a 486DX ............... eee eee D-5 
D.3. Boards Supporting TI486SXL and a 486DX4 .................+... D-6 
D.4 Boards Supporting the VL Bus ............00 0 cece eee eee D-7 
D.5 Power Planes for 3.3-V and 3.3-V/5-V Systems Using 

MI48ESXE Or 4BC DX ieee eee levee ovehel eee cele) ayetere vehei sy siele)a ale) ayetelci es D-9 
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D.1 Boards Supporting TI486SXL and Intel 


Pinnames and assigned locations are provided in Chapter 6, Mechanical Spec- 
ifications. 


(1 Function: Connect BUSY# to S4 (Required) 


BUSY# is required for the coprocessor and for self test. If neither is used, 
BUSY# can be left open as it has an internal pullup resistor. 


168 CPGA Socket Side System Logic Side Jumper 
486SX Pin No./Name 
O———————— _ BUSY# Open: 486SX 
S4/NC ———————_© Closed: Tl486SXL 


(1 Function: Hardware Cache Flush Support 
m CASE 1: Systems with no level-2 or parallel cache (optional) 


Hardware flush support for the TI486SXL is optional as this function 
may be implemented in software by setting bit 5 in TI486SXL Configu- 
ration Control register 0 (CCRO). However, the software implementa- 
tion may negatively impact the performance of certain designs. To 
achieve maximum system performance, a hardware implementation 
is recommended as illustrated in Figure D—1. Also, see Appendix C, 
Design Considerations and Cache Flush, for more information. 


168 CPGA Socket Side System Logic Side Jumper 
486SX Pin No./Name 
1 o——————— S Series TDO 
B16/NC ———————© 2 1-2: 486SX 
(B16/TDO for 3 oO. |ISAMEMW# = 273: TI486SXL 


Intel S Series) 


Figure D—1.FLUSH# for 144-Pin and 168-Pin Tl486SXL 


MEMW# MEMW# 
(ISA) (Internal pullup) 


Note: The external flush logic is incorporated on 
the 144-pin and 168-pin Tl486SXL chip. 
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m CASE 2: Systems with a level-2 serial cache that do not hold the CPU 
during all DMA/Master cycles (required) 


168 CPGA Socket Side System Logic Side Jumper 
486SX Pin No./Name 


oO 
1 SXFLUSH® 45 pone 


C15/FLUSH# ———————O 2 2-3: TI486SXL 
3 O——————__ T1486 FLUSH# 


The FLUSH# hardware implementation is shown in Figure D-2. 


Figure D-2.FLUSH# Logic With Level-2 Serial Cache 


MEMW# 
FLUSH# 


HLDA: = SS Se | 
(From Cache Controller) 
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(1 Function: Pipeline Support (Required) 


m@ CASE 1: Chipset does not support pipelining. 


168 CPGA Socket Side System Logic Side 
486SX Pin No./Name 
Vcc 
10 kQ 


A13/NC ———————_© 


Jumper 


Open: 486SX 
Closed: TI486SXL 


m CASE 2: Chipset supports pipelining and drives NA#. 


O———— _ NA# (Chipset) 


A13/NC ———————_O 


Open: 486SX 
Closed: TI486SXL 


m@ CASE 3: Chipset supports pipelining but does not drive NA#. 


A13/NC ———————_O £1000 


Open: 486SX 
Closed: TI486SXL 


( Function: Floating Point Unit (FPU) Support (Optional) 


168 CPGA Socket Side 
486SX Pin No./Name 


System Logic Side 


O————— _ ERROR# 
A12/NC ———————_o 


O————————_ PEREQ 
R17/NC ———————© 


(J) Function: Power Management Support (Optional) 


168 CPGA Socket Side 
486SX Pin No./Name 


System Logic Side 


O——————__ SM I# 
B10/NC ———————O 


O—  SMADS# 
B13/NC ———————_O 


O————————_ SUSP# 
C13/NC ———___O 


O———————_ SUSPA# 
B12/NC ———————_O 
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Jumper 


Open: 486SX 
Closed: TI486SXL 


Open: 486SX 
Closed: TI486SXL 


Jumper 


Open: 486SX 
Closed: TI486SXL 


Open: 486SX 
Closed: TI486SXL 


Open: 486SX 
Closed: TI486SXL 


Open: 486SX 
Closed: TI486SXL 
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D.2 Boards Supporting TI486SXL and a 486DX 


Pinnames and assigned locations are providedin Chapter 6, Mechanical Spec- 
ifications. 


(1 Function: 486DX Support (Required) 


eT | 
Note: 


For the 486DX to be supported in the same design, the following jumper is 
required in addition to those shown in Section D.1, Boards Supporting 
Tl486SXL, Intel, and AMD 486SxX, and any other differences in Intel-/AMD- 
supported pinouts. 
eee eee eee eee ss) 


168 CPGA Socket Side System Logic Side Jumper 
486DX Pin No./Name 


1 o—____ 
ms 1-2: 486SX/TI486SXL 


A15/IGNNE# ——————_0 2 _9. 
3 IGNNE# 2-3: 486DX 


1 Function: 486DX2, P24T Upgrade Socket Support (Optional) 


168 CPGA Socket Side System Logic Side Jumper 
486DX Pin No./Name 


O——————_ FLT# Open: 486SX 
C11/NC ———————_O Closed: TI486SXL 


(C11/UP# 
for 486DX2) 


(D12/NC 
for P24T) 
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D.3 Boards Supporting TI486SXL and a 486DX4 
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Pinnames and assigned locations are provided in Chapter 6, Mechanical Spec- 
ifications. 


(1 Function: 486DX4 PEREQ and CLKMUL (Required) 


ES | 


Note: 


For the Tl486SXL and the 486DX4 to be supported in the same design, the 
following jumpers are required in addition to any other differences in 
Intel-/AMD-supported pinouts. See subsections D.4, Boards Supporting the 
VL Bus on page D-7, and D.5, Power Planes for 3.3-V and 3.3-V/5-V Sys- 
tems Using TI486SXL or 486DX4 on page D-9. 


| 


168 CPGA Socket Side System Logic Side Jumper 
486DX4 Pin No./Name 


1 O———___——_ PEREQ 


R17/CLKMUL——————_ 2 a Lach 
3 O— _ CLKMUL : 
(J Function: Voltage Detect (Required) 
168 CPGA Socket Side System Logic Side Jumper 
486DX4 Pin No./Name 
1 O—__———._ BUSY# 
S$4/VOLDET——————_O. 2 Mir oe 
3 O——————- VOLDET ; 
(J Function: Burst Mode (Required) 
168 CPGA Socket Side System Logic Side Jumper 
486DX4 Pin No./Name 
10 kQ 
1 O—W—__ Vgg 
1-2: Tl486SXL 
oO 
2 BLAST# 2-3: 486DX4 
R16/BLAST# -————————_O 3 (VL slot) 
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D.4 Boards Supporting the VL Bus 


In order to support the VESA VL bus 2.0p proposal, the following design guide- 
lines should be considered. 


D.4.1 Cache Snooping 


In a VL-bus design, the local bus controller resolves arbitration between the 
CPU and the VL-bus master. For this architecture, the CPU can be forced to 
relenquish the host bus by asserting HOLD. There are two options for main- 
taining cache coherence: 


._j) Use the BARB bit in Configuration Control register 0 (CCRO) to flush the 
internal cache. 
[1 Use the inverted HLDA output of the CPU to perform a hardware FLUSH# 
to the CPU. See Figure D—3. The FLUSH# pin must be enabled by using 
bit 4 of CCRO. 


Figure D-3. Hardware Flush 


HLDA 4 


VV CPU 


FLUSH# 


Note: Pinnames and assigned locations are provided in Chapter 6, Mechanical Specifications. 


These methods can be used only if the system logic supports the CPU HOLD 
arbitration scheme. 


D.4.2 VL-Bus Clock 


The VL-bus clock signal is a 1X clock that is in phase with the 486-type CPU 
and is driven by either the system logic or the local-bus controller. The VESA 
specification allows for a frequency range of up to 66 MHz and dynamic clock 
scaling. The specification limits the low-to-high level skew from the CPU clock 
to LCLK as shown in Table D-1. 


Table D-1. VL-Bus Skew 


LCLK Max Frequency Unit 
33 
40 ns 
50 


Systems that currently support a 1X and a 2X clock source should supply the 
2X clock source to the CLK2 input of the TI486SXL and the 1X clock source 
to the VL-bus LCLK signal. 


Systems that currently support only a 2X clock source can consider the addi- 
tion of a PLL or clock divider to generate the 1X VL-bus clock. 
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D.4.3  VL-Bus Slot ID Settings 


The VL-bus slot ID settings are shown in Table D-2. 


Table D-2. VL-Bus Slot ID Settings 
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Slot ID 
IDO 


ID1 
ID2 


ID3 


ID4 


Setting 


Comments 
TI486SXL Mode 
TI486SXL Mode 


0: Minimum one wait state for writes 
1: Zero wait states for writes 


0: >383 MHz CPU clock speed 
1: <33 MHz CPU clock speed 


Burst transfer not supported 
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D.5 Power Planes for 3.3-V and 3.3-V/5-V Systems Using TI486SXL or 
486DX4 


Power planes for implementing 3.3-V-only and mixed 3.3-V/5-V systems, us- 
ing the TI486SXL or the 486DX4, are described in the following subsections. 


D.5.1 Power Planes for 3.3-V Systems 


Figure D—4 shows the implementation of a 3.3-V system that supports use of 
either the TI486SXL or a 486DX4 microprocessor. This implementation yields 
a 5-V ISA bus and a 3.3-V VL bus with the microprocessor running at 3.3 V. 


Figure D-4. 3.3-V VL-Bus Implementation 


Voc =3-3 V | 3.3-V TI486SXL 
5-V Power Supply Regulator ae 


3.3-V VL Bus 
r—-——*+--—-7 
| | 
| | 
Chipset | | 
(3.3-V/5-V | VGA/LCD | 
mixed) | | 
| VL Slots | 
| (optional) | 
5-V ISA Bus 
( cs aw 3 c—- ¢ ras a a | 
| | 
| | 
| | 
| | 
| | 
| ISA Slots | 
A ae ee PO ent ne a 4 
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D.5.2 Power Planes for Mixed 3.3-V/5-V Systems 


Figure D—5 shows the implementation of a 3.3-V/5-V system that supports use 
of either the TI486SXL or the 486DX4 microprocessor. This implementation 
yields a 5-V ISA and and a 5-V VL bus with the microprocessor running at 
3.3 V. 


Figure D-5. Mixed 3.3-V/5-V VL-Bus Implementation 


Vocs =5V 


5-V Power Supply 


3.3-V TI486SXL 


or 


Veco =3.3 V DX4 
Regulator 
Cross-Bar 
Technology 


5-V VL Bus 
r 4 
| | 
5-V | | Slot 1]] Slot 2] | 
Chipset SRAMs ! | 
DRAMs | | 
| VL Slots | 
| (optional) | 
(eee 4 
5-V ISA Bus 
ec, <3 ar | 
| | 
| | 
| | 
| | 
| ISA Slots | 
DE a 4 
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Chipset Support 


The following list of chipset vendors providing single-chipset solutions that 
support both the Intel/AMD and the T1486SXL interface was compiled from in- 
formation received from the specified chipset vendors. This is a partial list and 
is not meant to be all inclusive. 


DCUUOUOUUUUOUUUOU 


ACC Microelectronics 
Acer Laboratories 
EFAR 

ETEQ Microsystems 
Headland Technology 
OPTI 

PicoPower Technology 
SARC/PC Chip 

Silicon Integrated Systems (SIS) 
Symphony Laboratories 
Tidalwave 

UMC 

UniChip 

Western Digital 
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Thermal Management in 
Microprocessor-Based Systems 


This appendix explains basic thermal concepts and the relationship between 
thermal measurements and the system. In addition, problems associated with 
comparing thermal specifications from different manufacturers are discussed. 
Finally, corrective activity within JEDEC is explained in detail. This information 
is intended for the casual scientific reader, and the only prerequisite is general 
engineering knowledge of semiconductor devices. 
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Introduction 
E.1 Introduction 


Thermal management is considered to be an important factor in both the con- 
ception and usage of semiconductor integrated circuits (ICs). Thermal man- 
agement is defined as the modes and techniques required to transfer a pow- 
ered IC’s resultant operating heat to a system thermal heat sink. The thermal 
management of an IC is normally discussed in terms of that IC’s operating 
junction temperature (i.e., p-n junction of a diode). There are two main goals 
for thermal management. 


1 Thefirstis to ensure that the operating junction temperature of the IC does 
not exceed the range of functional and maximum temperature limits of that 
IC. The functional temperature range of an IC is bounded by the tempera- 
tures that allow the IC to meet specified performance requirements. If the 
operating junction temperature of an IC is not within the functional temper- 
ature range, diminishing system performance and operational errors may 
result. The absolute maximum temperature is defined as the temperature 
at above which physical damage begins to occur to the IC. 


(J Thesecond objective of thermal management is to ensure that the operat- 
ing temperature of an IC enables the product reliability objectives for a giv- 
en application to be met. Device failure rates are proportional to IC operat- 
ing temperatures as shown in Figure E—1. 


Figure E—1. Effect of Component Operating Temperature on Component Failure RateT 


= electron volts 


1.1 


AT 
ATref 


Normalized Failure Rate — 


0 50 100 150 200 


Ty—Junction Temperature—°C 


T Richard C. Chu and Robert E. Simons, “Recent Developments For Electronic Packaging”, Elec- 
tronic Packaging Forum, Van Nostrand Reinhold, New York, 1991, pp. 183-189. 
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E.1.1 Thermal Impedance 


Equation E-1. 


Equation E-2. 


E.1.2 Power 


Equation E-3. 


Thermal impedance is an entity’s resistance to heat dissipation through con- 
duction, convection (natural and forced), and radiation. Thermal impedances 
are often analogous with electrical resistance, R, as described by Ohm’s law 
in Equation E-1. 


Ohm’s Law 


n= 


where V represents voltage and | represents current. Similarly, thermal imped- 
ances (shown in the following equation), often denoted by R with a subscript 
of the Greek letter theta (©), can be described by the relationship in 
Equation E-2. 


Thermal Impedance 


— AT 


where AT represents the temperature difference between two reference 
points and Q is the heat-flow rate measured in watts. Heat-flow rate, Q, is often 
written as P or Pg. 


Power is defined as the rate of energy flow. This energy can be thought of as 
electrical energy or the resultant heat that is generated. Both electrical and 
heat energy are measured in watts. The power consumption of an integrated 
circuit is defined by Equation E-3: 


Power Consumption of an Integrated Circuit 


P=V-l 


where V represents voltage and | represents current. 


E.1.3 Junction Temperature 


Indirectly, you can find the junction temperature (T y) of a transistor or diode on 
a die using a temperature-sensitive electrical parameter (TSP) (see 
Figure E—2). Such a method is nondestructive and assumes that there is a uni- 
form distribution of both current and temperature across the junction of the 
transistor or diode being used to conduct the test. Often the substrate diode 
(a diode used to reduce the amount of system noise) is used to conduct such 
atest. The diode’s forward voltage drop is monitored while active and dissipat- 
ing power as shown in Figure E-3. By controlling the temperature of a refer- 
ence point and the voltage across the diode, you can find the junction tempera- 
ture. This method of obtaining the junction temperature is precise and ac- 
cepted throughout the semiconductor industry.t 


Sherwin Rubin and Frank F. Oettinger, “Thermal Resistance Measurements on Power 
Transistors”, Semiconductor Measurement Technology: Thermal Resistance Measurements on 
Power Transistors, US Government Printing Office, Washington, 1979, pp. 1-4. 
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Figure E-2. Die Using a Temperature-Sensitive Electrical Parameter 


Junction 
Silicon Die SP. 


Figure E—3. Diode Voltage Versus Temperature for a Typical Bipolar Device 
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E.2 Modes of Heat Transfer 


There are three ways that heat is transferred between points of differing ther- 
mal potential: 


LJ Conduction 
LJ Convection 
_j Radiation 


Conduction, the simplest heat-transfer mechanism, is the transfer of kinetic 
energy via vibrations and collisions from a more excited atom or electron to a 
nearby atom or electron that is less excited. The ability to conduct heat is de- 
pendent on the material. For example, gases are poor heat conductors be- 
cause of their low density. However, metals are good thermal conductors be- 
cause their inherently high number of free electrons encourage collisions. This 
ability to conduct heat is quantified by a proportionality constant (k) often re- 
ferred to as thermal conductivity. Table E—1 lists some common packaging 
materials and their associated thermal conductivities. 


E-4 


Modes of Heat Transfer 


Table E-1. Thermal Conductivity of Packaging Materials$.1 


Metals (at 25°C) Thermal Conductivity, (W/m) (°C) 
Copper 397 

Aluminum 238 

Lead 34.7 

Alloy-42 (common lead-frame material) 10.7 

Gas (at 20°C) Thermal Conductivity, (W/m) (°C) 
Air 0.0234 

Nonmetals Thermal Conductivity, (W/m) (°C) 
Glass 0.8 

Epoxy glass 0.89 


A second mode of heat transfer is convection, which is heat transfer by the 
movement of a heated substance. In the case of natural convection, such 
movement is caused by the induced differences in density that result from the 
expansion and compression of a gas or liquid subjected to temperature 
changes. Another type of convection, forced convection, forces movement of 
a cooling medium across a heat source. Often, forced convection is created 
by the use of a cooling fan within a system. 


A final mode of heat transfer is radiation. Radiated heat transfers occur due 
to thermal emission primarily in the infrared spectrum. Radiation is subject to 
common-wave phenomena such as reflection. The ability of the surface of a 
material to radiate heat is referred to as that surface’s emissivity. Possible val- 
ues for emissivity are from zero to unity, where unity signifies the maximum 
thermal radiation at a given temperature. § 


E.2.1 Integrated Circuit Thermal Resistance 


The thermal resistance of an integrated circuit within a system can be broken 
into two major components: 


1 Internal resistance of the IC, Re; 
(11 External resistance of the IC, Rex 


Conventionally, resistances are discussed in more distinct terms. Re jc is de- 
fined as the thermal impedance from the silicon die within an integrated circuit 
to the package surface or case of that IC. This thermal path includes the ther- 
mal impedance of each material used in packaging the IC, such as solder, die 
adhesive, base materials, leads, the case itself, etc. Raj and Re jc are inter- 
changeable terms because Re jc quantifies only those thermal impedances 
internal to the package ending at the package leads or package body surface. 
Rej and Rec are functions of the IC package only and are not significantly 
affected by the particular system in which an IC is used. The semiconductor 
manufacturer controls the values of R@j and Reyc. 


Charles A. Harper and Frank E. Altoz, Electronic Packaging and Interconnection Handbook, 
Mc Graw-Hill, Inc, New York, pp. 2.61—2.62. 

§ Raymond A. Serway, Physics for Scientists and Engineers, Saunders College Publishing, 
Philadelphia, p. 545. 


Thermal Management in Microprocessor-Based Systems E-5 


Modes of Heat Transfer 


The thermal impedances that exist between the package case and the system 
ambient thermal sink are collectively defined as R@ca (thermal impedance 
from case to ambient air). For a given package size and format, all such ther- 
mal impedances are primarily dependent on the particular system in which an 
IC is used (PWB thermal conductivity, presence of forced convection, etc.). 
These impedances are controlled by the user of the IC. Often Reyc and Reca 
are referred to together as Re@ya. 


Rega can be qualitatively described as the thermal impedances between, and 
including, a silicon die heat source and the system ambient thermal heat 
sink.1# 


Table E—2 displays the relative sizes of Rajyc and R@ca. The table also dis- 
plays the values of Rayc and Re@ca~ as percentages of the corresponding value 
of Rey, at 0 cubic feet per minute (cfm) airflow. All entries listed come from var- 
ious data sheets of several manufacturers of 486-class microprocessors. No- 
tice that Rejc accounts for a maximum of 15 percent of Rey. For all QFP 
packages listed, 9.6 percent of Reya is Reyc. For the PGA package, 15 per- 
cent of Rega is Reyc. As previously mentioned, the semiconductor manufac- 
turer controls the value of Re@jc through various process parameters. There- 
fore, at maximum, R@yc accounts for approximately 1/8th of the Reya value 
for packages listed. Stated differently, Raca (or the system), accounts for 
approximately 7/8ths of the total thermal resistance within a system. 


Table E—2. Thermal Performance of Various 486-Class Microprocessors 


Reuc, Reca, 
Package Material Number of Pins (cj) PercentofReya (cw) Percent of Roya 
Metal 100 2 8.7 21 91.3 
QFP 
Plastic 100 4 11.1 32 88.9 
PGA Ceramic 132 3 15.0 17 85.0 
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The system in which an integrated circuit is used is quite significant in the Reya 
value for that IC. As stated, at least 7/8ths of the thermal impedance from the 
silicon die to ambient air is due to the system. Significant effort is concentrated 
on thermally optimizing the system to improve the thermal performance of the 
ICs within. 


Note that the IC user controls the design specifications for the majority of items 
that contribute to the quality of the thermal path. Several user-controlled sys- 
tem factors are available that can contribute to reducing the thermal resistance 
of an IC in the system design: 


_j} PWB thermal conductivity 
1 Proximity/density of the ICs on a PWB 
Lj Airflow 


{Charles A. Harper and Frank E. Altoz, Electronic Packaging and Interconnection Handbook, 
Mc Graw-Hill, Inc, New York, pp. 2.61—2.62. 

# Jack Belani and B.J. Shanber, “Impact of Packaging Materials on Semiconductor Thermal 
Management’, Third Conference of Electronic Packaging: Materials and Processes & Corrosion 
in Microelectronics, Minneapolis, Minnesota, April 28-30, 1987, pp. 113-115, 118. 
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E.2.2 PWB Conductivity 


The thermal conductivity of a PWB is determined by the individual thermal con- 
ductivities of materials that comprise the PWB. PWBs are nonhomogenous 
and normally consist of a base-laminate material, such as epoxy glass, and 
various amounts of other materials, such as traces or planes made of copper. 
The thermal conductivity varies little between commonly used PWB laminates. 
Since the thermal conductivities of commonly used routing metals are much 
higher than that of the PWB laminate (for example, 238 for aluminum and 397 
for copper versus 0.89 for epoxy glass), the thermal conductivity of a PWB is 
proportional to the amount sof metal in the PWB. 


Table E-3 shows the thermal conductivities of several PWBs made from FR-4, 
a type of epoxy glass. The boards vary by the number of signal layers and the 
number of ground layers (essentially, the copper volume). As copper volume 
increases from 0 to 6.9 percent, thermal conductivity increases by a factor of 
90 or almost two orders of magnitude. This is a result of the higher thermal con- 
ductivity of copper compared to epoxy glass. The thermal conductivity of the 
PWB is proportional to the signal and ground metal content of a PWB. The area 
and thickness of metal on lower levels of a PWB, under the footprint of an IC, 
affects the thermal performance of that particular IC.I| 


Table E—3. Thermal Conductivity of PWBs With Various Amounts of Copper 


Board Type and 
Layers 


FR-4 
FR-4 2 layer 
FR-4 4 layer 


FR-4 4 layer 
t Trace thickness is 2 um. 


Signal-Layer | Ground-Layer Copper Thermal Conductivity, 
Trace Widtht Trace Widtht Volume, (%) (W/m) (°C) 
= —_ 0 0.3 
35 um — 1.0 3.7 
35 um 35 um 3.5 13.6 
35 um 70 um 6.9 26.9 


Table E—4 compares two types of PWBs with identical 100-pin QFP devices 
mounted on each board. Each board uses identical minimum-metal, signal- 
routing traces to complete the signal-interconnection layer. The single-sided 
PWB contains no metal on the opposite side of the board. The two-layer PWB 
has a solid-copper ground plane on the opposite side. All measurements are 
taken with no airflow present. The value of Re@ya for the IC is improved by 9 
percent by the addition of a copper ground plane (a resulting increase of 55 
percent in copper content). When metal is present on the lower levels of aPWB 
within the projected footprint of an IC (see Table E—4), the thermal perfor- 
mance of that IC is improved due to a lower value of Rega. 


Il Ake Malhammer, Ph.D, “Heat Dissipation Limits for Components Cooled by the PCB Surface”, 
International Electronics Packaging Conference, San Diego, California, September 15-18, 
1991, pp. 307-308. 
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Table E—4.Re@ J, Versus Board Type 


Board Type Rega: (°C/W) 
Single sided 36.0 
Two sided 32.8 


Figure E—4. Metal Within Projected Footprint of Integrated Circuit 


PWB 


| If metal is in this area, the thermal \ 


performance of the IC improves. \ 


ae Projected Footprint A 


E.2.3 Proximity of Integrated Circuit on Board 


E.2.4 Airflow 
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The location of an integrated circuit on a PWB can make a significant differ- 
ence in the junction temperature of that device. In an ideal design, those ICs 
with the lowest heat dissipation are located in the center of a PWB, and those 
ICs with the highest heat dissipation are at the edges of the PWB. A concept 
known as the territory surface method associates an area of PWB required to 
sink the heat flow from agiven IC. Often, in the case of surface-mount packag- 
ing, an IC’s territory is violated by either other IC’s territories or the edge of the 
PWB. In either case, thermal performance is hindered in all involved ICs. Note 
that not only the proximity of an IC on a PWB but also its relative location on 
the board has significant effects on thermal performance.||* 


In atypical system, heat dissipated by natural convection is a significant por- 
tion of overall heat dissipation. When forced convection is present within a sys- 
tem, the amount of heat dissipation increases in proportion to the rate of flow 
of the convection. Higher rates of forced convection result in lower values of 


R@JA- 


In Table E-5, values of Rega for varying amounts of forced convection are 
listed for a 100-pin QFP mounted on a single-sided board. As airflow (forced 
convection) increases from a rate of 0 cfm to 600 cfm, Rey, is decreased by 
a factor of 2.4. As arule, the Reya value of an|C in asystem is inversely propor- 
tional to the presence/amount of forced convection (airflow). 


ll Ake Malhammer, Ph.D, “Heat Dissipation Limits for Components Cooled by the PCB Surface”, 
International Electronics Packaging Conference, San Diego, California, September 15-18, 
1991, pp. 307-308. 

*M.M. Hussein, D.J. Nelson, and A. Elshahiu-Riad, “Thermal Interconnection of Semiconductor 
Devices on Copper-Clad Ceramic Substrates”, 7th IEEE SEMI-THERM Symposium, August 
1991, pp. 121-122. 
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Table E—5.Re ya Versus Airflow 


Airflow (cfmt) RoJa 
0 36 
100 32 
200 26 
400 19 
600 15 


T cfm = cubic feet per minute 


E.3 Thermal Specifications of Integrated Circuits 


E.3.1 


Manufacturers normally publish detailed specifications of ICs that contain a 
thermal portion, or a thermal specification. Manufacturer’s thermal specifica- 
tions differ in many ways, but most thermal specifications list the range of al- 
lowable package case temperatures (case temperatures at which the range 
of functional junction temperatures are not exceeded) to ensure that a device 
is functional. In addition, many manufacturers include some of the following 
variables: 


LI Reuc 
LV Rega at various airflows 
LJ Maximum ambient air temperature, Ta, at various airflows. 


Many thermal variables are system dependent. To compare ICs on the basis 
of their published thermal specifications, you must know the system in which 
such specifications were measured. Recall that 7/8ths of the thermal resis- 
tance of an IC, Re@ya, is due to elements other than the IC. In addition, mea- 
surement techniques can affect thermal resistance values. In general, the fol- 
lowing three factors prohibit comparisons between different manufacturers’ 
thermal specifications: 


Li System dependence of Reya and Reca 
LJ Technique/location for measurement of Ta 
LJ Definition of Q or P® 


System Dependence of Reya and Reca 


There is presently no industry-accepted standard system for measuring ther- 
mal resistances. Consequently, systems used to measure thermal specifica- 
tions vary widely between manufacturers with respect to thermal performance. 
For similar ICs built by different manufacturers, thermal specifications are 
often misleading due to different thermal systems. 


O [7lJames A. Andrews, “Package Thermal Resistance Model Dependency on Equipment 
Design”, IEEE Transactions on Components, Hybrids, and Manufacturing Technology, Volume 
ll, Number 4, December 1988, pp. 536-537. 
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There are several approaches to publishing thermal specifications: worst 
case, best case, and somewhere between these two points. As a result, you 
need to be cautious when making decisions based on system-dependent ther- 
mal resistances suchas Reya and Reca. If information concerning the system 
is omitted from a thermal specification, values for Raya and Reca should be 
disregarded for the purpose of comparison. 


E.3.2 Measurement of Ty 


Recall Equation E—2 for thermal impedance, repeated here. 


_ AT 
Re=% 


where AT is the difference in temperature between a transistor junction and 
some reference point. 


The choice of reference point and its temperature with respect to the junction 
is of great importance to the precision of thermal impedance. Holding the junc- 
tion temperature constant as the reference point’s temperature is increased 
makes the calculated thermal impedance smaller. Most manufacturers 
choose the local ambient-air temperature within the system enclosure as the 
reference point. However, because the local air temperature is likely to be sub- 
ject to natural convection and a resulting nonuniformity of temperature, the ref- 
erence point must be well defined to avoid inaccuracy. If no information is in- 
cluded concerning the reference point, absolute comparisons of thermal spec- 
ifications must be made cautiously. 


E.3.3 Definition of Q 


The rate at which electrical energy is converted into heat energy is known as 
power (P). P is defined by Equation E—4. 


Equation E-4._ Power 
P=Vcc X Icc 


For thermal-impedance calculations, some manufacturers use a relationship 
that describes the typical power dissipation as shown in Equation E—5. 


Equation E-5. Power Dissipation 
P=Vecit) X Icc(t) 
where (t) denotes a typical value 


Other manufacturers use the maximum amount of power dissipated as shown 
in Equation E-6. 


Equation E-6. Maximum Power Dissipation 


P= Vcocim) X Ioc(m) 


where (m) is a maximum value. 


Tl Thermal Specification Methodology 


Neither method is incorrect, but typical power dissipation is significantly lower 
than maximum power dissipation in most circumstances. As a result, thermal 
impedances calculated using typical power dissipation are lower than those 
thermal impedances calculated using maximum power dissipation. This is be- 
cause of the inverse relationship between impedance and power dissipation 
(Q), as shown in Equation E-7. 


Equation E-7. Relationship Between Impedance and Power Dissipation 


AT 
Re = 


When examining thermal specifications, note the manufacturer’s definition of 
power dissipation. Often, the equation for power dissipation is included in ei- 
ther the publication section pertaining to electrical characteristics or the ther- 
mal specification’s definition of variables. If not, use caution when comparing 
such specifications. 


E.4 Tl Thermal Specification Methodology 


Some manufacturers publish thermal specifications according to the typical 
system conditions in which the IC is used. Some manufacturers publish ther- 
mal specifications for absolute worst-case conditions. Other manufacturers’ 
thermal specifications are applicable for conditions somewhere between 
these two points. To ensure the reliability of Texas Instruments microprocessor 
devices, the thermal specifications are published in accordance with a realistic 
worst-case scenario. This means that the data is measured in a conservative 
manner, but not so conservative as to hinder its usefulness when designing 
microprocessor-based systems incorporating Tl devices. The following para- 
graphs provide a detailed explanation of how TI obtains thermal data and the 
reasons for using such methods. 


A thermal test die is mounted in the package to be tested and the package is 
mounted on atest board consisting of 0.062-inch thick FR-4 material with one- 
ounce copper etch. The 100-pin QFP (in this case, a package of the 
TI486SXLC microprocessor) is soldered to a single-sided test board using 
matching footprints and the minimum circuit-trace density required to intercon- 
nect the device electrically to the board. The 132-pin ceramic PGA (in this 
case, a package of the Tl486SXL microprocessor) is inserted in a socket that 
is soldered to the same test board. As discussed previously, PWB thermal con- 
ductivity has a significant effect on the R@ya value of a device and is propor- 
tional to the amount of metal in the PWB within the projected footprint of the 
device. Note that the test PWB described above has a minimum amount of 
routing metal and is a single layer. The PWB conductivity is minimized, and the 
experimentally determined value for Re@ya is maximized. 


To measure still-air R@ya, the package to be tested and board on which it is 
mounted are placed horizontally in a container that has a volume of one cubic 
foot of air. Power is supplied to a transistor on the die, and after a thirty-minute 
stabilization period, the temperature of the air (T1) and the base-emitter volt- 
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age (VBE1) of the transistor are recorded. Poweris supplied to an array of tran- 
sistors on the die to cause an increase in junction temperature, and the base- 
emitter voltage (VBE2) of the powered transistor is recorded. The package 
and board are placed in an oven and the temperature is raised to 90°C (T2) 
and another measurement of base-emitter voltage (VBE3) is recorded. Still-air 
Rega canbe calculated by substituting the measured variables (T1, T2, VBE1, 
and VBE3) into the following equations: 


(VBE1-VBE3) 


OPS Saray 
a _ (VBEt - VBE) 
OJA slope 


For the purpose of measuring R@yc, the package and board are placed in a 
bath of moving fluorinert FC-77. After a thirty-minute stabilization period, the 
temperature of the fluorinert is recorded (T1) and the voltage across a pow- 
ered transistor on the test die is measured from base to emitter (VBE1). Power 
is then applied to an array of resistors on the test die to produce a subsequent 
increase in junction temperature. The voltage across the same transistor from 
base to emitter (VBE2) is recorded. The package and board are placed in an 
oven at 90°C (T2) and the voltage across the powered transistor is measured 
from base to emitter (VBE3). Note that at this point, the resistors are no longer 
powered. Once VBE1, VBE2, VBE3, T1, and T2 are known, these values are 
substituted into the last two equations to find a value for Rejc. Rec is inde- 
pendent of the system so system information has been omitted from this ex- 
planation. However, the test die that is used within the package must be con- 
sistent in size and power dissipation with the actual application die. 


(VBE1-VBE3) 


SOS ETT) 
a. _ (VBEt - VBE2) 
OJC slope 


An example of plotted thermal data is shown in Figure E—5. 


To measure Re@ya versus airflow, the test package and mounting board are 
placed vertically in a calibrated wind tunnel as shown in Figure E—6. A temper- 
ature probe and anemometer-type airflow probe are located towards the front 
end of the tunnel. A fan is mounted at the rear of the tunnel. Its airflow is di- 
rected away from the wind tunnel to induct air from the front of the tunnel to 
the rear. At various controlled rates of airflow, the voltage is measured across 
a powered transistor on the test die (VBE1). The temperature in the tube is re- 
corded as T1. An array of resistors on the test die is powered to cause an in- 
crease of temperature across the die. The voltage is again measured across 
the same transistor (VBE2). The device is removed from the wind tunnel, 
placed in an oven at 90°C (T2), and only the transistor is powered. The voltage 
from base to emitter on the transistor is measured (VBE3). As in the procedure 
for Rec, the experimental values are substituted into the equations for slope 
and Rega to find the value for the slope and Re ya for a specific airflow. 
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Figure E—5. Plotted Die Thermal Data 


VBE1 Ambient 
VBE2 Power 
VBE3 Oven 
0 25 90 
T1 T2 


Ty—Junction Temperature of Test Die—°C 


Figure E-6. Wind Tunnel Schematic 


Device test board 
Temperature and 
anemometer-type 
airflow probe 


Wind tunnel cross-section is 6 in by 6 in. ’ : 
5 in 24 in 


78 in 


(Dimensions are approximate.) 


The procedures described above are relatively consistent across the industry 
with the exception of the test-board specifications and the measurement loca- 
tion of T1. In the test-board specification, the thermal conductivity is of great 
importance to the experimentally determined value of Re@ya. As shown in 
Table E-3 (page E-7), a 4-layer FR-4 PWB is approximately 89 times as ther- 
mally conductive as a single layer PWB with no copper. It is not uncommon to 
find 8 or more layers in a microprocessor PWB. TI uses a single-sided test 
board with only one ounce of copper etch as opposed to a typical application 
multilayer PWB with a much higher content of copper etch, and consequently, 
better thermal conductivity. 


The Rega values reported by Tl should be viewed as worst-case versus typical 
for an application. The ambient temperature location is measured and is not 
affected by an increase in operational case temperature as would occur ina 
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E.5 Guidelines 


typical closed-system-case application. Such a measurement of ambient tem- 
perature allows for a greater difference or delta between the junction tempera- 
ture and the measurement reference point and, as a result, a higher value of 
Rega: When comparing Reya values from Texas Instruments with other 
manufacturers, understand the test conditions of each manufacturer before 
drawing conclusions regarding which unit offers the best thermal perfor- 
mance. 


The possibility of disparity in generating thermal specifications causes difficul- 
ty in comparisons of similar parts produced by different manufacturers. To en- 
sure the validity of acomparison between the thermal specifications of several 
devices, follow these guidelines: 


(J Ensure thatthe system is the same for all devices included in the compari- 
son. lf the system is not the same, only consider values for Re jc. Disre- 
gard Reca and Rey, values because of their system dependence.# 


Lj Disregard from the comparison those devices whose thermal impedances 
were obtained using different reference points. Remember that AT de- 
creases as the reference temperature increases (holding the junction tem- 
perature constant), and that thermal impedance is proportional to AT. An 
increase in AT (or a decrease in the measured reference temperature) 
causes a resulting increase in the calculated thermal impedance. 


Lj Include only those devices with like definitions for power dissipation. High- 
er values for P result in lower values of calculated thermal impedance. 
Typical power dissipation (the product of typical Vcc andtypical Icc) is sig- 
nificantly lower than maximum power dissipation (the product of maxi- 
mum Vcc and maximum Icc)). 


E.6 Current Trends and Theory of Correction 


The dilemma concerning thermal specifications and the incompatibilities be- 
tween manufacturers has not gone unnoticed. The JEDEC JC-15 committee 
has developed objectives for standardizing electrical and thermal modeling 
and measurements for IC packages and interconnects. A task force, desig- 
nated JC-15.1, was originated to accomplish two of the above goals by the fol- 
lowing actions: 


_j Propose a standard board for device thermal-resistance measurements 


_j Provide a standard measurement to which actual thermal-modeling mea- 
surements can be compared 


# Jack Belani and B.J. Shanber, “Impact of Packaging Materials on Semiconductor Thermal 
Management”, Third Conference of Electronic Packaging: Materials and Processes & Corrosion 
in Microelectronics, Minneapolis, Minnesota, April 28-30, 1987, pp. 113-115, 118. 


E.7 Conclusions 


Conclusions 


Companies often use varying systems and measuring techniques to obtain 
thermal-resistance measurements of ICs. To cope with these variances, JE- 
DEC JC-15.1 proposes a board layout to standardize thermal-resistance mea- 
surements. The proposed board (3 in by 4.5 in) contains only the device to be 
characterized with a minimum amount of metal. If widely accepted within the 
semiconductor industry, such a board definition could improve the validity of 
comparisons between integrated-circuit thermal specifications. 


In summary, the thermal impedance of an integrated circuit within a system is 
divided into two components: 


LJ Rej and Rex 
L) Rec and Reca 


Reyc (or Rej) account for only about 1/8th of the total thermal resistance of an 
IC within asystem. Reca (or Rex) is responsible for 7/8ths of the total thermal 
resistance. The total thermal resistance of an IC within a system, often referred 
to as Rega, is significantly dependent on the system’s thermal performance. 
The system thermal performance can be attributed to several factors: 


_j PWB thermal conductivity 


1 Proximity of ICs on the PWB and total component density of the PWB 


Lj Presence/amount of forced convection 


Thermal specifications of ICs include one or more of the following variables 
versus airflow: Rejc, Rega; and Ta(m)- Rega is dependent on the system. 


To make a valid comparison of multiple manufacturers’ thermal specifications 
for similar parts, thermal specifications must meet the following guidelines: 


Lj Identical systems (i.e., PWB thermal conductivity, airflow) 


[1 Similar reference points for thermal-impedance calculation 


[1 Like definitions of P 


Because of the current problems surrounding thermal specification compari- 
sons, JEDEC has provided a task force, JC-15.1, to develop and maintain a 
standard-PWB definition to measure thermal resistances to be included in 
thermal specifications. Until such a method is adopted industry wide, the dis- 
cussed guildelines should be followed to assure valid thermal-specification 
comparisons. 
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Ordering Information 


F.1 Part Number Components 


Components of the TlI486SXL(C) family of microprocessor part numbers are 
diagrammed in the following example. 


EXAMPLE: ————BTX486SXLC B - V 25 GA 


Device name: 
SXLCB = 16-bit I/O 
SXLB = 32-bit I/O 
SXLC2 and SXL2 are clock doubled 

Device revision level: 

Supply voltage: 
0=5 V 
V=3.3 V 
G = 3.3 V with 5-V-tolerant inputs 

Speed: 
25 = 25 MHz 
33 = 33 MHz 
40 = 40 MHz 
50 = 50 MHz 

Package type: 
HBN = 144-pin ceramic quad flat package 
GA = Ceramic pin grid array (S-GA = 132 pins for the Tl1486SXL family) 
PJF = Thermally enhanced 100-pin plastic quad flat package 
PCE = Thermally enhanced 144-pin plastic quad flat package 
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Part Numbers for Microprocessors Offered 


F.2 Part Numbers for Microprocessors Offered 


Table F—1 lists the complete part number for each version of the TI486SXL mi- 
croprocessors offered. Table F—2 lists the part number for each version of the 
TI486SLC/DLC microprocessors offered. The tables provide a short descrip- 
tion consisting of the supply voltage, performance capabilities, and the me- 
chanical package for each device part number. 


Table F—1. TI486SXLC and Tl486SXL Part Numbers 
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Device Part Number 
TX486SXLCB-V25-PJF 
TX486SXLCB-040-PJF 
TX486SXLC2B-050-PJF 
TX486SXLB-040S-GA 
TX486SXL2B-050S-GA 
TX486SXLB-040-PCE 


TX486SXL-G40-HBN 
TX486SXL2-G50-HBN 
TX486SXLB-040-HBN 
TX486SXL2B-050-HBN 
TX486SXL-G40-GA 
TX486SXL2-G50-GA 
TX486SXLB-V40-GA 
TX486SXL2B-V50-GA 
TX486SXLB-040-GA 
TX486SXL2B-050-GA 


Speed (MHz) 


Supply Voltage (V) 


70, 20F 
25 
#0, 208 
25 
70, 20% 
25 
70, 20% 
25 
#0, 208 


25 


Package 


100-pin TEP plastic 
QFP 


132-pin PGA 


144-pin TEP plastic 
QFP 


144-pin ceramic 
QFP 


168-pin PGA 


T These microprocessors can be operated as nonclock-doubled 40 MHz or clock-doubled 20/40 MHz. 
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Table F—2. TI486SLC/E and Tl486DLC/E Part Numbers 


Device Part Number 
TX486SLC/E-033C-PJF 
TX486SLC/E-V25C-PJF 
TX486SLC/E-040C-PJF 
TX486DLC/E-033C-GA 
TX486DLC/E-040C-GA 
TX486DLC/E-033C-PCE 
TX486DLC/E-040C-PCE 


Supply Voltage 
(V) Speed (MHz) Package 


5 __~*| 00 in TEP plas 
Pas SC«dP 
ros | CO” 

ee 
FP 
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Appendix G 


Glossary 


2-way setassociative: A type of cache in which an index identifies two lines 
of data (i.e., only two members of a set may exist in cache at a given 
time). This design provides significant performance improvement 
compared to direct-mapped caches as measured by the hit ratio. See set 
associative. 


A20M: This pin is enabled when bit 2 of CCRO is true. The A20M# pin is an 
anomaly occurring in PC designs as a result of the fact that truncated ad- 
dresses can be generated by an 8086/8088 outside the physical address 
range. 


A: Accessed/nonAccessed bit. Segment descriptor bit 8. 


AC: Alignment-Check. An enable flag that verifies that computer-word bits 
are aligned with respect to significance. 


address: A space in memory where a byte is assigned. Each byte of 
memory is assigned a specific address space. The amount of address- 
able memory space depends on the width of the CPU address bus. The 
TI486SXLC has a 24-bit address bus, and the TI486SXL has a 32-bit ad- 
dress bus. 


AF: Auxiliary carry Flag. Set when an operation results in a carry out of 
(addition) or borrow into (subtraction) bit position 3. Otherwise, it is 
cleared. 


AM: Alignment-check Mask bit. CRO bit 18. 


ARR1 through ARR4: Address Region registers 1 through 4. Define the 
location and size of the memory regions associated with the internal 
cache. These registers are unique to the Tl486SXL(C) microprocessors. 


assert: To apply a signal. A signal asserted is logically true. 


AVL: AvVaiLable bit. Segment Selector register bit 20. 


Glossary 
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bandwidth: The amount of information that can be transferred during a peri- 
od of time. As an example, video, which requires a maximum bandwidth 
of 80 megabytes per second (MBps), takes advantage of the 1382 MBps 
transfer rate provided by the VESA-VL or PCI bus. 


BARB: A bit that, when bit 5 of CCRO is set (high), enables flushing of the 
internal cache when a hold state is entered. 


base : The beginning of some segments (extra data, code, or data seg- 
ments) or the beginning address provided in some registers (CC3, 
GDTR, IDTR, or SD). 


BIOS: Basic Input Output System. A set of routines that contain detailed 
instructions for activating computer and peripheral devices. The BIOS is 
normally implemented in nonvolatile memory. 


bit: The fundamental unit of computer memory. A bit canbe a1 ora0.Abyte 
is made up of eight bits. 


breakpoint: A pointinaprogram at which to stop execution so that machine 
status may be determined. 


byte: A sequence of eight bits. Represents one character of information. 


cache: A small, high-speed memory used to provide a temporary storage 
location for data most likely to be requested by the CPU. This allows for 
quick access of data and improved CPU performance (i.e., Zero wait 
states). 


cacheable: The property of a memory location if the system allows data at 
this location to reside in the cache. 


cache addressing: A type of addressing performed by dividing the physical 
address into an index field, a tag field, and a byte select field. A valid field 
indicates whether the cached data at that physical address is currently 
valid. 


cache (data) coherency: A consistent relationship between data in cache 
memory and data in other memories. Data coherence is necessary when 
a system has multiple memories. If several memories contain the same 
data word, modifying that data word in one memory causes the data to 
be incoherent with the data stored in the other memories. Therefore, the 
other memories that have a copy of that same data word must either up- 
date or invalidate their copy. 


cache flush: A memory operation used to maintain cache consistency. In 
a cache flush all locations with dirty bits are written to main memory. 
Then, the cache contents are cleared (flushed). 
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cache hit: Success by the CPU in retrieving requested data from cache 
memory. 


cache miss: Failure by the CPU in retrieving requested data from cache 
memory because the data is not there. 


cachetagaddress: Address thatcontains the high-order bits of the physical 
address of the associated data stored in the cache. 


CCRO,CCR1: Configuration Control Register 0 and Register 1. Configura- 
tion control register 0 enables certain functions associated with cache 
control, suspend mode, and the clock-doubled mode. Configuration con- 
trol register 1 sets up internal cache operation and system-management 
mode. These registers are unique to the TI486SXL(C) microprocessors. 


CD: Cache Disable bit. CRO bit 30. 


CF: Carry Flag. Set when an operation results in a carry out of (addition) or 
borrow into ( subtraction) the most significant bit. Otherwise, it is cleared. 


CKD: (Enable) Clock Doubled. CCRO bit 6. 


clock doubled: A mode of microprocessor operation in which the internal 
core operates at the CLK2 frequency while the external bus interface op- 
erates at half the CLK2 frequency. 


clock scaling: Changing the clock input frequency down or up. The 
TI486SXL(C) microprocessor family supports dynamic clock scaling. 


clock speed: The speed at which the CPU operates, typically measured in 
megahertz (MHz). 


CISC: Complex Instruction Set Computer. A type of computer architecture 
that requires multiple clock cycles per instruction but offers many spe- 
cialized instructions for programmers. 


conventional memory: DOS memory that occupies the addresses be- 
tween 0 and 640K bytes and is available to the user or software pro- 
grams. 


coprocessor: An external processor that can be operated in parallel with 
the CPU to relieve the CPU load. The Tl486SXL(C) microprocessors are 
designed to interface to a coprocessor. 


CPGA: Ceramic Pin Grid Array. A package that consists of ceramic sub- 
strates to hermetically enclose the IC and an interconnection scheme 
that presents male leads extending from the bottom of the package. 


CPL: Current Privilege Level. The privilege level of the current operation. 


CPU: Central Processing Unit. The execution unit of the microprocessor. 
The CPU consists of control, shift, adder, multiplier, and limit units and 
a register file. 


CRO, CR2, CR3: Control registers 0, 2, and 3. Control register 0 contains 
system control flags and indicates the general state of the CPU. The low- 
er 16 bits are referred to as the machine status word. When paging is en- 
abled and a page fault is generated, control register 2 retains the 32-bit 
linear address of the address that caused a fault. Control register 3 con- 
tains the 20-bit base address of the page directory. 
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CS: Code Segment. The register that holds a 16-bit segment base In real 
and virtual-8086 operating modes. In protected mode, the code segment 
register holds a segment selector. 


D: Default. The default length bit for operands and addresses. 


descriptor: A data structure that defines a segment’s base, limit, and attrib- 
utes. 


DF: Direction Flag. A flag that, when cleared, causes string instructions to 
auto-increment (default) the appropriate Index registers (ESI and/or 
EDI). Setting DF causes auto-decrement of the Index registers. 


direct-mapped cache: Thesimplest form of set associative cache architec- 
ture, one-way set associative. In a direct mapped cache, an index identi- 
fies only one line of data (i.e., only one member of a set may exist in 
cache at a given time). Therefore, only one address comparison is re- 
quired to determine if the requested word is in the cache. 


direct-memory access (DMA): Memory access that allows data to be 
transferred between a device and memory without the constant control 
of the CPU. DMA permits two operations to be executed simultaneously. 
As an example, the CPU can access the cache while DMA allows a pe- 
ripheral to access the main memory. 


disk drive controller: Electronic circuitry that transfers a copy of requested 
information or a software application from storage (disk drive, floppy 
drive, or CD-ROM) into RAM upon request by the microprocessor. 


displacement: A value of up to 32 bits in length that is supplied as part of 
the instruction. The displacement is used as the address in direct ad- 
dress mode. The displacement is added to based, index, scaled index, 
based index with displacement, and based scaled index with displace- 
ment address modes. 


DNA: Device Not Available. A fault indicating that the requested device is 
busy or missing. 


DOS memory: Conventional memory that is limited to 1M byte of memory. 
DP: Displacement. 


DPL: Descriptor Privilege Level field. Gate or segment descriptor bits 
14-13. 


DRAM: Dynamic Random Access Memory. Volatile memory chips that use 
capacitors to store information as an electrical charge. DRAMs offer high 
density at a low cost, but must be refreshed frequently, which makes 
them relatively slow. 


drive controller board: See disk drive controller. 
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DROthroughDR7: Debug Registers Othrough 7. Contain memory address- 
es and breakpoints used to support debugging of the microprocessor. 


DS: Data Segment. |In real and virtual-8086 operating modes, the data seg- 
ment register holds a 16-bit segment base. In protected mode, the data 
segment register holds a segment selector. 


DT: Descriptor Type bit. Segment selector register bit 12. 


DTE: Directory Table Entry. Contains the starting address of the second- 
level page table. Selected from the directory table by the ten most- 
significant bits of the linear address. 


DTI: Directory Table Index. Acts as a 32-bit master index to up to 1K individu- 
al second-level page tables. 


E: Application descriptor bit. Segment descriptor bit 11. 
EAX: Extended accumulator register. 

EBP: Extended base pointer register. 

EBX: Extended base register. 

ECX: Extended count register. 

EDI: Extended destination index register. 

EDX: Extended data register. 


EFLAGS: Extended Flag word register. Contains status information and 
controls certain operations on the microprocessor. The lower 16 bits of 
this register are referred to as the flag register. 


EGA: Enhanced Graphics Adapter. A video standard for IBM-compatible 
PCs named after a particular video adapter that was the standard for the 
IBM PC-AT. 


EIP: Extended Instruction Pointer register. Contains the offset into the cur- 
rent code segment of the next instruction to be executed. 


EM: EMulate processor extension. CRO bit 2. 


EPL: Effective Privilege Level. Protects memory from being accessed by 
privilege levels that are lower than the descriptor privilege level. 


EPROM: Electrically Programmable Read-Only Memory. A permanent 
memory used for items such as the BIOS instructions, which occupy the 
reserved address space in DOS systems. EPROM access times tend to 
be long, but, being nonvolatile, they are used primarily for initialization. 
If higher performance is required, the EPROM contents can be copied 
to DRAM memory. This technique is called shadowing. 


ES: Extra Segment register. The destination of STOS, MOVS, REP STOS, 
and REP MOVS instructions. Special segment override prefix ES allows 
the use of this additional segment register. 
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ESP: Extended General Purpose register. 


expanded memory: A memory scheme that borrows addresses from re- 
served DOS memory to point to additional memory as ameans of getting 
around the 1M byte DOS memory limit. 


extended memory: Amemory scheme used by some software applications 
to get around the 1M byte DOS memory limit. 


far jump: A jump whose destination is in another code segment. 


fastIDE: Fast Integrated Device Electronics. Provides data transfer of 16-bit 
wide data at speeds of up to 13 MBps. 


flash memory: Cards designed for program storage, can be used in floppy 
and solid-state applications, and are ideal for applications that require 
frequent updates. 


float: A condition during which all 3-state bidirectional and output terminals 
are placed in a high-impedance state to isolate the microprocessor from 
the system electrically. 


flush: To invalidate the entire contents of cache memory. 


footprint compatible: Compatible for installation in existing boards/sys- 
tems. 


FPU: Floating Point Unit. A part of the microprocessor that accelerates the 
computation of floating-point arithmetic. If a PC does not have an FPU, 
the CPU emulates floating-point instructions, which take more time to 
execute. See CPU. 


FS: Additional data Segment register. Special segment override prefix of FS 
allows the use of this additional segment register. 


fully associative: The most flexible type of cache placement policy. There 
is no single relationship between all of the addresses. The cache has to 
store the entire address of each block of words and compare its address 
with each of those in the cache until it finds a match. 


G: Limit Granularity bit. Segment descriptor bit 23. 
GD: Global Disable. Denies access to the debug register when set. 


GDT: Global Descriptor Table. Part of the selector mechanism that contains 
segment descriptors used when the TI bit in the segment selector regis- 
ter is set to zero. 


GDTR: Global Descriptor Table Register. A register that holds a 32-bit base 
address and 16-bit limit for the global-descriptor table. 
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graphic accelerators: A high-performance video display board for graphi- 
cal user interface. Graphic accelerators have special circuitry which 
speeds up image processing. The CPU sends commands to the acceler- 
ator which executes them rather than having the CPU manipulating and 
sending data to the adapters. Objects are drawn on the screen rather 
than being transferred pixel by pixel. This reduces the amount of data 
that is transferred across the processor bus. 


graphic adapter: A circuit board that translates the instructions from the 
CPU into information that the PC monitor can understand. Graphic 
adapters before and including VGA rely on the CPU to perform opera- 
tions that manipulate the display image. Advanced adapters, which han- 
dle more data, have circuitry to speed up image processing directly on 
the graphic adapter card. 


graphic coprocessor: Aprogrammable chip that performs much of the pro- 
cessing required to display graphics on a video screen. A graphic copro- 
cessor is fully programmable making it more flexible than a graphic 
adapter. 


graphics mode: A video mode that divides images into thousands of dots, 
or pixels, to create text and detailed images. 


GUI: Graphical Users Interface. Amethod of operating software applications 
that permits the user to interact with the computer by using icons and 
small graphics rather than by using text and commands. 


green PC: Anenvironmentally correct PC that reduces power consumption 
(by as much as 80% when compared to current models). The develop- 
ment of green PCs resulted from the Environmental Protection Agency’s 
Star program. 


GS: Additional data Segment register. Special segment override prefix of 
GS allows the use of this additional segment register. 


hard drive controller: See disk drive controller. 


hot insertion (or hot swapping): Plugging or unplugging PC cards without 
disrupting the host system’s operation. Typically associated with 
PCMCIA. 


IDE: See Integrated Device Electronics. 


IDT: /nterrupt Descriptor Table. An array of up to 256 8-byte interrupt descrip- 
tors, each of which points to an interrupt service routine. 


IDTR: /nterrupt Descriptor Table Register. A register that holds a 32-bit base 
address and 16-bit limit for the interrupt-descriptor table. 
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IF: /nterrupt Flag. When set, maskable interrupts (INTR input pin) are ac- 
knowledged and serviced by the CPU. 


index: A reference or initial value. 


instruction: A machine-language command to the CPU. The Tl486SXL(C) 
instructions are described in detail in Chapter 7, Instruction Set. 


instruction set: A set of machine-language instructions that the architec- 
ture of the TlI486SXL(C) CPU can execute. 


integrated device electronics (IDE): An interface based on the ISA bus 
that uses the set of registers and commands originally used by the IBM 
PC-AT. This interface is the current favorite among most disk drive mak- 
ers for hard disks because it is inexpensive and has a low command 
overhead. Drives using IDE interfaces integrate the controller and drive 
in one, making them more efficient than older drives. Therefore IDE 
drives and controllers do not need to translate commands from your mi- 
croprocessor. IDE provides data transfer of 8-bit wide data at speeds of 
up to 5M byte ps. Fast IDE provides data transfer of 16-bit wide data at 
speeds of up to 13 MBps. See fast IDE. 


INTR: /nterrupt. A signal generated by external hardware that changes the 
normal sequential flow of a program by transferring program control to 
a selected service routine. 


invisible: Contents (data, address components, and current states) of reg- 
isters and stored data that the programmer cannot access, trap, or re- 
trieve. 


IOPL: /nput/Output Privilege Level. Indicates the maximum current privilege 
level (CPL) permitted to execute I/O instructions. Also indicates the max- 
imum CPL allowing alteration of the IF bit. 


VO: Input/Output 


I/O bus (peripheral or system bus): The data path used to communicate 
with the various I/O or peripheral devices in the PC. Using this bus avoids 
loading down the time-critical local or processor bus with the I/O or pe- 
ripheral devices. 


VO controller: Circuitry specialized for I/O operations. Most I/O devices 
have a controller that acts as its supervisor and interfaces with the CPU. 
The controller can be built either into the system board or on a separate 
adapter that is plugged into the system bus. Some controllers have their 
own special-purpose processors and some even have their own 
memory. 


I/O device interface: An essential part of any PC that supports the commu- 
nication between the CPU and the device or peripheral. 


/O mapped: Memory mapping in which I/O devices are mapped into the 
programmed I/O address space. Address decoding is easier since fewer 
address lines must be decoded. 


G bs 


Glossary 


KEN: The KEN# pin is enabled when bit 3 of CCRO is true. 


LDT: Local Descriptor Table. Part of the selector mechanism that contains 
segment descriptors used when the TI bit in the segment selector regis- 
ter is set to one. 


LDTR: Local Descriptor Table Register. Holds a 16-bit selector for the local- 
descriptor table. 


limit: Defines the maximum range. 
line: The fixed unit of information transfer between cache and main memory. 


line size: The amount of information in a line, which is defined as a number 
of bytes. Line size is one of the parameters that most strongly affects 
cache performance as it represents the amount of data the cache must 
retrieve during each cache line replacement (every cache miss). 


linear address: In real mode, the physical address. The offset address is 
added to the product of the segment register multiplied by sixteen to pro- 
duce the linear address. 


In protected mode, the offset address is added to the base address to 
produce the linear address. If paging is disabled, the linear address is the 
physical address. If paging is enabled, the linear address is translated 
by the paging mechanism into the physical address. 


local bus: The data path that connects peripherals directly to the CPU. The 
local bus is designed to transmit 32-bit data at the speed of a PC’s pro- 
cessor. Two local bus standards are VESA-VL and PCI. 


locality: Address memory in the neighborhood of locations recently ac- 
cessed by programs. 


LRU: Least-Recently Used bit. Indicates which of the cache two-way sets 
was more recently accessed. 


math coprocessor: See FPU. 
MBps: Megabytes Per Second. 
Mbps: Megabits Per Second. 


memory mapped: A type of memory addressing in which I/O devices can 
be mapped into physical memory addresses. Even though more aq- 
dresses must be decoded with this interface, memory-mapped devices 
can be accessed using CPU instructions allowing for more efficient code. 
Memory mapping also offers more flexibility in protection than I/O map- 
ping through memory management since a device can be inaccessible/ 
fully accessible or visible but protected. Very few peripherals use 
memory-mapped ports except for video cards. 
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MMAC: Main Memory Access. Storing data in or retrieving data from main 
memory. 


modem: A data communications device that translates (MOdulates) com- 
puter signals into tones and translates (DEModulates) tones back into 
computer signals to transfer data between computers over telephone 
lines. 


monochrome: A video mode that uses only one color in varying intensities. 
MP: Monitor Processor extension bit. CRO bit 1. 


multithreading: A software technique that allows an operating system or 
application to split tasks into subtasks, or threads, for improved speed 
and efficiency. 


NCO: Noncacheable 0. Bit 0 in the configuration control register 0. When set, 
this bit sets the first 64K bytes at each 1M-byte boundary as noncache- 
able. 


NC1: Noncacheable 1. Bit 1 inthe configuration control register 0. When set, 
this bit sets sets 640K bytes to 1M-byte memory region as noncache- 
able. 


NC (Terminal designator): No external Connection. Make none. 
negated: Logically false, not true. 


NMI: Nonmaskable Interrupt. A rising-edge-sensitive input that, when as- 
serted, causes the processor to suspend execution of the current instruc- 
tion stream and begin execution of an NMI service routine. 


noncacheable memory: A memory system in which all shared memory 
locations are considered noncacheable. Access to the shared memory 
is never copied to the cache, and the cache never receives stale data. 


nonvolatile memory: Memory in which the data content is maintained 
whether the power supply is connected or not. ROM and EPROM are ex- 
amples of nonvolatile memory. 


NT: Nested Task flag. A flag that, while executing in protected mode, indi- 
cates that the execution of the current task is nested within another task. 
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OA: Offset Address. Amemory address that is the result of an offset calcula- 
tion. Base address, index address, scale factor, and displacement are 
the components used, in various combinations, to calculate the offset ad- 
dress. 


OF: Overflow Flag. A flag that is set if the operation resulted in acarry or bor- 
row into the sign bit of the result but did not result in a carry or borrow out 
of the high-order bit. The overflow flag is also set if the operation resulted 
in acarry or borrow out of the high-order bit but did not result in a carry 
or borrow into the sign bit of the result. 


opcode: Thephysical implementation of an instruction in machine-readable 
code. 


OS: Operating System. A master control program that supervises the func- 
tions and components of a computer system. 


P: Prefix. Abit ina prefix byte. Also, Present bit (gate or segment descriptor 
bit 15). 


paging: A memory management technique that provides direct access to 
small portions of stored data within a large segment of virtual memory 
space. Paging is useful in minimizing the amount of physical space re- 
quired to service active routines. 


parallel port: A communications port used mainly to send out data to be 
printed. A parallel port moves data in bytes (8-bits wide) or words ( 16-bits 
or 32-bits wide) depending on the application. 


parity bit: The eighth bit or extra bit that is used to help detect errors. 


PCD: Page-level Cache Disable bit. A bit located in test register 7. This bit 
corresponds to the PCD bit of a page-table entry. 


PCI: Peripheral Component Interconnect. A board-level local-bus imple- 
mentation for high-end PC applications. PCI is a fully independent bus 
that requires a PCI bridge to establish communication with the CPU bus. 
PClis fully independent from the CPU and the CPU timing, and PCI can 
be used with non-X86 systems. PCI multiplexes addresses and data to 
reduce the number of required pins. Each card is uniquely identified by 
a special code that allows for autoconfiguration. 


PCMCIA: PersonalComputer Memory Card International Association. A pe- 
ripheral bus standard that provides a way for the portable computer user 
to expand the memory, storage, communication, and other capabilities 
that are common to the desktop PC user. There are several types of 
PCMCIA cards: DRAM, flash memory, hard-disk drives, LANs, and mo- 
dems. PCMCIA cards can be plugged into the PCMCIA expansion slot 
without opening the computer. 
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PDBR: Page-Directory Base Register. A register located in control register 3 
that contains the 20-bit base address of the page directory. 


PE: Protected mode Enable bit. CRO bit 0. 
peripheral bus: See //O bus. 


peripherals: Devices such as printers, fax machines, modems, and so forth 
that are external to the CPU. 


peripheral interface: An essential interface of any PC that supports the 
communication between the CPU and the peripherals. 


PF: Parity Flag. A flag set when the low-order 8 bits of the operation result 
contain an even number of ones. Otherwise the parity flag is cleared. 


PFO: Page-Frame Offset. Part of the paging mechanism. The physical page 
frame data is selected by the first 12 bits of the linear address. 


PG: PaGing enable bit. CRO bit 31. 


PGA: Pin Grid Array. A package that consists of substrates to hermetically 
enclose the IC and an interconnection scheme that presents male leads 
extending from the bottom of the package. 


physical address: The 32-bit linear address when paging is disabled. 
When paging is enabled, the paging mechanism translates the linear ad- 
dress into a physical address. The physical address appears on the pins 
of the CPU. 


pipelined addressing: A type of addressing that allows bus cycles to over- 
lap, increasing the amount of time available for the memory or I/O device 
to respond. The NA# input to the CPU controls address pipelining. 


pipelining: Aseries of suboperation stages, like fetching, decoding, execu- 
tion, and address translation. Pipelining results in a continuous execu- 
tion rate of one instruction per clock cycle. 


pixel: The smallest information building block of an on-screen image. 
Screen resolution is usually expressed in the number of pixels making 
up the width and height of a complete on-screen image. 


PL: Privilege Level. Implements a protection scheme. The values for privi- 
lege levels are 0 to 3. Level 0 is the most privileged and 3 the least privi- 
leged. 


PLL: Phase-Locked Loop. |n the Tl486SXL(C) microprocessor, a PLL im- 
plements clock synchronization. 


posted write: Theprocess of buffering or storing address and data ina write 
buffer. In a write-through cache, read cycles are accelerated but write 
cycles are not. Through the use of a write buffer, write cycles can also 
be accelerated. 


power management: A feature of some CPUs that shuts down unused 
parts of the computer to save power. 


Glossary 


PQFP: Plastic Quad Flat Package. A package that consists of a metal sub- 
strate, IC, and interconnection scheme that presents leads extending 
from the four sides of the plastic encapsulated package. The leads are 
formed using a double break to create a planar foot on each lead that 
supports the package body above the seating plane. The thermally en- 
hanced package includes a metal plate or slug near the mounting sur- 
face that enhances heat dissipation. 


prefix: Bytes placed in front of an instruction to override segment defaults, 
change operand/address-size attributes, assert LOCK#, and repeat 
string instructions. 


privilege level: In the protected mode, a designation that controls the use 
of privileged instructions, I/O instructions, and access to segments and 
segment descriptors. 


protected mode: The microprocessor’s operating mode when the PE bit of 
control register 0 is set. In protected mode, the enhanced memory man- 
agement capabilities, which include segmentation and paging, are avail- 
able. Code has one of four privilege levels, with some processor instruc- 
tions restricted to the most-privileged code. 


PTE: Page Table Entry. Selected from the page table by bits 21-12 of the 
linear address. The base address of the desired page frame. 


PTI: Page Table Index. A 32-bit master index to up to 1K individual page 
frames. 


PWT: Page-level cache Write Through. A bit in test register 7 that enables 
or disables the page-level cache function. This register bit corresponds 
to the PWT bit of a page-table entry. 


QFP: Quad Flat Package. A package that consists of a substrate, IC, and 
interconnection scheme encapsulated in plastic that presents leads ex- 
tending from the four sides of the package. The leads are formed, using 
a double break, to create a planar foot on each lead that supports the 
package body above the seating plane. 


R: Opcode or register bit. 
R/W: Read/Write or Readable/Writable bit. Segment descriptor bit 9. 


realmemory: Memory that actually exists in the PC, or memory that is not 
borrowed from an external source. 


realmode: The processing mode in which the microprocessor is backward 
compatible with 8086/8088 microprocessors. No hardware protection is 
provided for segment access or use, and there is no privileged code. 
TI486SXL(C) powers up or resets to real mode. 
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RF: Resume Flag. A flag used in conjunction with debug register break- 
points. The resume flag is checked at instruction boundaries before 
breakpoint exception processing. If set, any debug fault is ignored on the 
next instruction. 


RISC: Reduced Instruction Set Computer. A type of computer that executes 
instructions in one clock cycle by limiting the number of instructions that 
are available. 


ROM: ReadOnly Memory. A permanent, unchangeable memory used in the 
PC to accomplish system startup. ROM stores the BIOS programs need- 
ed to perform diagnostics and instruct the computer in various opera- 
tions. When using DOS, the contents of the ROM are placed in reserved 
memory. 


RPL: Requested Privilege Level field. Segment selector register bits 1-0. 


scale factor: Scale Factor. A factor (1, 2,4, or 8) by which the index address 
is multiplied when the offset mechanism calculates the offset address. 


SCSI: Small Computer System Interface. A type of peripheral interface that 
offers hard disk data transfer rates of up to 10 MBps. 


segmentation: Amemory management technique that permits application- 
specific segmentation to improve the efficiency of memory space utiliza- 
tion. 


serial port: Acommunication path based on a standard convention of trans- 
mitting two-way asynchronous serial data. A serial port moves data one 
bit at a time and can be half duplex (one direction at a time) or full duplex 
(both directions simultaneously). 


serialization: Conversion of byte-wide data as inputto serial bits ina stream 
as output. 


set associative: A type of cache placement policy that has more than one 
set of direct-mapped caches operating in parallel. Several block loca- 
tions are allowed for each cache index. The block can be placed in and 
retrieved from any set. This type of cache performs more efficiently than 
a direct mapped cache, but needs a wider tag field and additional logic 
to determine which set should receive the data. 


SF: Scale Factoror Sign Flag. Set equal to the high-order bit of the operation 
result (0 indicates positive, 1 indicates negative). 


shadowing: A technique used to improve system performance and achieve 
faster access by copying the contents of ROMs or EPROMs into DRAM. 


s-i-b byte: A byte that includes the s, Index, and Base fields. 


SIMM: Single In-Line Memory Module. A packaging technique for memory 
modules. 
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SM4: System Management access region 4. Sometimes called address re- 
gion register 4. SMM memory space is defined by assigning address re- 
gion 4 to SMM memory space. 


SMAC: System-Management Memory Access. |n normal mode, SMADS# 
address strobes are generated instead of ADS# for system-manage- 
ment memory accesses. 


SMI: 


System Management Interrupt. An interrupt that causes the micropro- 
cessor to enter the system management mode, which allows various 
subsystems of the computer to be powered down under certain condi- 
tions. The system-management interrupt has a higher priority than any 
other interrupt, including NMI. 


SMM: System Management Mode. A power management feature that al- 
lows various subsystems of the computer to be powered down when not 
in use to conserve power. 


snooping: A method of maintaining cache consistency. The cache control- 
ler monitors the bus lines to detect any shared locations that are written 
to by another processor. When a common cache location is found, it is 
invalidated, and cache consistency is maintained. 


SS: Stack Segment. A register that contains segment selectors that index 
into tables located in memory. These tables hold the base address for 
each segment as well as other information related to memory addres- 
sing. 


SRAM: Static Random Access Memory. A high performance storage me- 
dium that does not require refresh. 


SUS: SUSpend. A bit in configuration control register 0 that enables or dis- 
ables the SUSP# and SUSPA# pins, which control entry into the suspend 
mode. 


system bus: See //O bus. 


T: Opcode bit. 
T1: The first clock of a nonpipelined bus cycle. 
T1P: The first clock of a pipelined bus cycle. 


T2: Subsequent clocks of a nonpipelined bus cycle. NA# has not been 
sampled asserted. 


T2I: Subsequent clocks of a pipelined bus cycle. NA# has been sampled as- 
serted, but there is not yet an internal bus request pending. 


T2P: Subsequentclocks ofa pipelined bus cycle. NA# has been sampled as- 
serted, and there is an internal bus request pending. 


tag: Adirectory that records what data is currently being stored in a cache. 
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TEP: Thermally Enhanced Plastic. A plastic package that includes a metal 
plate or slug near the mounting surface to enhance heat dissipation. 


text mode: A video mode that divides the screen into character positions. 


TF: Trap enable Flag. A flag that, when set, causes a single-step interrupt 
to occur after the next instruction completes execution. TF is cleared by 
the single-step interrupt. 


Th: A hold acknowledge state. 
Tl: Table Indicator bit. Segment selector register bit 2. 
Ti: A bus ldle state. 


TLB: Translation Look-Aside Buffer. An on-chip, four-way, set-associative, 
32-entry page-table cache. Contains the most recently accessed pages, 
which reduces the average time required to make virtual memory refer- 
ences. 


TR: Task register. A register that holds a 16-bit selector for the current task- 
state segment (TSS) table. The TR is loaded and stored using the LTR 
and STR instructions, respectively. 


TR3 through TR7: Test registers 3 through 7. 


transfer rate: The rate at which data is moved from one component to 
another. Usually measured in megabits per second (Mbps) or mega- 
bytes per second (MBps). Some examples follow. 


Component Type Transfer Rate 
System bus ISA 1 to 4 MBps 
EISA 33 MBps 
MCA 32 MBps 
Local bus 32-bit VESA-VL 132 MBps 
PCI 132 MBps 
Hard disk drives IDE 4 MBps 
SCSI 5 MBps 
Networks Ethernet 10 MBps 
Token ring 4 to 16 MBps 


TS: Task Switched bit. CRO bit 3. 


TSR: Task State Register. A register that is saved and restored using the 
SVTS and RSTC instructions, respectively. 


TSS: Task State Segment. A table to which the processor saves the current 
CPU state during task switching before starting a new task. 


type: Segment Type field. Gate or segment descriptor bits 11-8. 


U/S: User/Supervisor. An attribute used in conjunction with the write/read at- 
tribute to implement protection at the page level. When set (user), the 
page is accessible at all privilege levels. When clear (Supervisor), the 
page is accessible only when CPL < 2. 


Glossary 


V86: Virtual 8086. See virtual-8086 mode. 


VESA: Video Equipment Standards Association VL-bus. A straight-forward 
expansion of the 486 host bus, meaning that it uses the 486 data, ad- 
dress, and control signals directly. A few more lines are added to allow 
bus mastering and other functions. 


VGA: Video Graphics Array. The most popular color graphics system for 
IBM-compatible computers at the time of this writing. 


virtual-8086 mode: The microprocessor operations when it handles seg- 
ment loads as an 8086. The microprocessor switches to virtual-8086 
mode when the virtual-8086 mode flag is set in protected mode. 


virtual memory: Space temporarily borrowed from an external memory 
source, such as hard disk, and used to simulate a large amount of 
memory. Up to 64 terabytes of virtual memory can be addressed in 386- 
and 486-based systems. 


visible: Contents (data, address components, and current states) of regis- 
ters and stored data that the programmer can access, trap, or retrieve. 


VM: = Virtual-8086 Mode flag. 


volatile memory: Amemory in which the data content is lost when the pow- 
er supply is disconnected. 


VRAM: Video Random Access Memories. Memories used by designers of 
high-resolution graphics and imaging systems to enhance system per- 
formance and display more colors at higher resolutions. 


wait state: The number of clock cycles the CPU has to wait for other opera- 
tions to complete before continuing with its operations. 


way: Defines the organization of a cache. A cache with a way 1 and a way 
2 is a 2-way cache. 


WP1, WP2, WP3: Write Protected access regions 7 through 3 bits. These 
bits, located in the configuration control register 1, define write protection 
and cacheability for three regions of memory space. The starting ad- 
dress and block size for each region is mapped in the address region reg- 
isters 1 through 3. 


WP: Write Protect bit. CRO bit 16. 


write back: An approach used to update the main memory. The CPU writes 
data into the cache and sets a dirty bit indicating that a word has been 
written into the cache but not into the main memory. The cache data is 
written back into the main memory at a later time and the dirty bit is 
cleared. Write-back accesses memory less than a write-through cache, 
but its cache control logic is more complex. 
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write protected: An attribute applied to segments to ensure that the re- 
questor privilege level is sufficient to perform a write to that segment. 


write-through cache: A type of cache used to update main memory. Data 
is written to the main memory while it is written to cache, or immediately 
afterwards. The main memory always contains valid data, and blocks in 
cache can be overwritten without data loss. The hardware implementa- 
tion remains relatively simple. 


ZF: Zero Flag. A flag that is set if the operation result is zero. Otherwise the 
flag is cleared. 


3.3-V operation 1-19 
3.3-V/5-V operation 1-19 


abort exceptions 2-45 
absolute maximum ratings 5-4 
ac characteristics. See timing 


accessing 
address space 2-9 
application register set 2-10 
configuration registers 2-9, 2-26 
coprocessor I/O 
TI486SXL 4-4 
TI486SXLC_ 3-4 
coprocessor I/O ports 2-8 
data/I/O during SMI service routine 2-54 
debug registers 2-31 
directory-table entry 2-42 
during protection 2-57 
gate descriptors 2-59 
global-descriptor-table register 2-19 
I/O address space 2-9 
I/O privilege required 2-58 
local-descriptor-table register 2-19 
main memory 2-26 
main memory overlapping SMM _ 2-28 A-5 
memory address space 2-37 
numeric coprocessor I/O. See accessing copro- 
cessor I/O 
page-table entry 2-42 
privilege requirements 2-57 
SMM 
defined space 2-28 
memory 2-28 
memory space 2-54 
stack-pointer register 2-11 
task register 2-23 
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accumulator 
initial value 2-3 to 2-4 


additional-data-segment-selector registers 2-12 


address 
/0 space 2-9 
memory space 2-37 
offset mechanism 2-37 
realmode memory 2-37 
setting size 7-4 

address bit-20 masking 2-54 C-3 
TI486SXL 4-44 
TI486SXLC 3-38 


address bus description 
TI486SXL 4-4 
TI486SXLC 3-4 


address spaces 
coprocessor communication space 2-8 
I/O address space 2-8 
memory address space 2-8, 2-37 
physical memory space 2-8, 2-39 
ranges 2-8, 2-26 

address-region registers 2-30 
initial value 2-3 to 2-4 


addressing 
data registers 2-11 
index and pointer registers 2-11 
main memory 
at the same address as SMM code A-9 
modes 2-38 
modes (memory) 2-38 
paging mechanism 2-40 
pointer and index registers 2-11 
realmode 2-38 
segment and selector 2-39 
using nonpipelined bus cycles 
TI486SXL 4-22 
TI486SXLC 3-20 
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addressing (continued) 
using pipelined bus cycles 
TI486SXL 4-26 
TI486SXLC 3-24 
while in virtual 8086 mode 2-60 


airflow measurement setup 
for thermal characteristics 6-20 


alignment-check enable 2-19 
flag 2-15 
altering SMM code limits 
in system-management mode A-34 
application register set 2-10 
flag word 2-14 
general-purpose registers 2-11 
data 2-11 
pointer and index registers 2-11 
segment registers and selectors 2-12 
instruction pointer 2-14 
overview 2-10 
pointer andindex 2-11 
segment registers 2-12 
selector (segment) 2-12 


auxiliary-carry flag 2-15 


base register 2-11 


base register 
initial value 2-3 to 2-4 
base-pointer register 2-11 
initial value 2-3 to 2-4 


based addressing modes 2-38 


BIOS modifications B-1 
differences of TlI486xLC/E and TI486SXL/C  B-2 
power-on and hard reset B-3 
protected-mode to real-mode switching B-3 
soft reset B-4 
turning on and off the internal cache B-4 


bit A2Z0M masking C-3 


bit definitions 
configuration control registers 0 and 1 2-27 
control register 0 (CRO) 2-19 
debug registers DR6 and DR7 2-32 
directory and page table 2-42 
error codes 2-48 
flag register 2-14 
gate descriptors 2-23 
page table and directory 2-42 
segment descriptors 2-22 
test registers 
TR3 to TR5 2-36 
TR6 and TR7 2-34 


block diagram 
TI486SXL_ 1-10 
TI486SXLC_ 1-6 
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block sizes 
address-region registers 2-30 


breakpoint address 
setting 2-31 


bus 
address 
TI486SXL 4-4 
TI486SXLC 3-4 
data 
TI486SXL 4-6 
TI486SXLC 3-6 
nonpipelined states 
TI486SXL 4-25 
TI486SXLC 3-23 
operation 
TI486SXL 4-21 
TI486SXLC 3-19 
pipelined states 
TI486SXL 4-30 
TI486SXLC 3-28 
state transitions 
TI486SXL 4-32 
TI486SXLC 3-30 
states 
TI486SXL_ 4-22, 4-26 
TI486SXLC 3-20, 3-24 


bus cycle 
definition 
TI486SXL 4-15 
TI486SXLC 3-13 
halt and shutdown 
TI486SXL 4-38 
TI486SXLC (3-33 
initiating and maintaining nonpipelined 
TI486SXL 4-25 
TI486SXLC 3-23 
initiating and maintaining pipelined 
TI486SXL 4-30 
TI486SXLC 3-28 
interrupt acknowledge 
TI486SXL 4-36 
TI486SXLC 3-31 
locked 
TI486SXL 4-36 
TI486SXLC 3-31 
nonpipelined addressing 
TI486SXL 4-22 
TI486SXLC 3-20 
pipelined addressing 
TI486SXL 4-26 
TI486SXLC 3-24 
types 
TI486SXL 4-15, 4-21 
TI486SXLC 3-13, 3-19 
using bus-size input 
TI486SXL 4-33 


bus operation and functional timing 


TI486SXL_ 4-21 
TI486SXLC 3-19 


byte enable outputs 
description 
TI486SXL_ 4-5, 4-13 
TI486SXLC 3-5 
generating A1—A0 
TI486SXL 4-13 
line definitions 
TI486SXL_ 4-12 
write duplication 
TI486SXL 4-13 


cache 
example code 
for turning off B-5 
for turning on B-6 
fills 
TI486SXL 4-41 
TI486SXLC 3-36 
flush enabling 2-27 
flushing C-4 
TI486SXL 4-43 
TI486SXLC 3-37 
initialization 2-2 
invalidation C-4 
onchip 1-17 
test registers 2-35 
cacheability 
disabling 2-28 
enabling 2-28 
calculation 
effective address 2-37 
offset address 2-37 
protected-mode address 2-39 
real-mode address 2-38 


callgates 2-59 
carry flag 2-15 
clearing the VM bit A-42 


clock 

scaling sequence 
TI486SXL_ 4-16 
TI486SXLC_ 3-14 

stopping the input 
TI486SXL 4-52 
TI486SXLC_ 3-47 

synchronization 
TI486SXL 4-19 
TI486SXLC 3-17 


clock-count summary 
abbreviations 7-13 
assumptions 7-13 


Index 


clock-doubled mode _ 1-18 
disabling 2-27 
enabling 2-27 
entering 

TI486SXL_ 4-16 
TI486SXLC 3-14 
using software control 
TI486SXL 4-15 
TI486SXLC 3-13 


code fetch 
first after reset 
TI486SXL 4-20 
TI486SXLC 3-18 


code-segment register 2-12 
initial value 2-3 to 2-4 


comparison 
of SMM features A-4 


configuration registers 2-26 
I/O address 
locations 2-9 
space access 2-8 


configuration-control registers 2-26 
bit definitions 2-27 to 2-30 


configuration-control registers 
initial values 2-3 to 2-4 


control registers 2-18 
bit definitions 2-18 
machine status word (MSW) 2-18 
page-directory base register 2-18 
page-fault linear address 2-18 


coprocessor 
busy 
TI486SXL 4-5 
TI486SXLC 3-5 
communication space 2-8 
error 
TI486SXL 4-6 
TI486SXLC 3-6 
I/O access address lines 
TI486SXL 4-4 
TI486SXLC 3-4 
interface 
TI486SXL 4-48 
TI486SXLC 3-42 


count register 2-11 


count register 
initial value 2-3 to 2-4 


CPU states related to system-management 
mode 2-55 


cross reference 
terminal assignments 
to 486SX, DX, DX4 (168-pin PGA) 6-12 
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DI definitions (continued) 
directory and page table register bits 2-42 
d field eae 2-48 
for instructions 7-6 ags 


gate-descriptor register bits 2-23 


data bus — page table and directory register bits 2-42 
description segment-descriptor register bits 2-22 
TI486SXL_ 4-6 test register bits for TR8-TR5 2-36 
TI486SXLC 3-6 test register bits for TR6 and TR7 2-34 
data registers 2-11 description 
initial values 2-3 to 2-4 address bus 
data-segment register 2-12 TI486SXL 4-4 
initial value 2-3 to 2-4 TI486SXLC 3-4 
dc electrical characteristics 5-7, 5-12 bus cycle 
3.3-volt devices 5-9 TI486SXL 4-21 
TI486SXLC-V25 5-9 TI486SXLC 3-19 
TI486SXL2-V50_ 5-11 byte enable outputs 
TI486SXL-V40 5-10 TI486SXL_ 4-5, 4-13 
3.3-volt/5-volt-tolerant devices 5-7 TI486SXLC 3-5 
TI486SXL-G40 5-7 data bus 
TI486SXL2-G50 5-8 TI486SXL 4-6 
5-volt devices TI486SXLC 3-6 
TI486SXL2-050 5-15 descriptor type 
TI486SXL-040 5-14 setting 2-22 
TI486SXLC2-050 5-13 descriptor-table registers and descriptors 2-19 
TIA86SXLC-040 5-12 global descriptor table register 2-20 
debug breakpoint conditions global-descriptor table 2-40 
setting 2-32 interrupt description table register 2-20 
debug registers 2-31 local-descriptor table 2-40 
initial value 2-3 to 2-4 design conventions C-2 
debugging destination-index register 2-11 
SMI code using software A-36 initial value 2-3 to 2-4 
testing SMM code A-35 detection 
decoupling 5-2 ofaTl microprocessor A-26 
default of SMM capable version A-28 
operand size differences between 
real versus protected modes 2-5 TI486SXL(C) family and Tl486SLC/DLC 
default segment override 7-4 family 1-16 
defining TI486SXLC series and TI486SXL series 1-15 
address region size direct addressing mode 2-38 
TI486SXL 2-30 direction flag 2-15 
TI486SXLC 2-29 directory and page table entry 
nancacheable block size bit definitions 2-42 
setia as oe directory table 2-41 
SMM memory region size caer ee A20M pin 2-27, C-3 
TIAS6SXE 2-30 (ignore) SMI input 2-28 


TI4B6SXLC 2-29 (masking) alignment check 2-19 


definitions cache 2-19 

bus cycle cacheability 2-28 
TI486SXL 4-15 clock doubled 2-27, B-2 
TI486SXLC 3-13 using software 

configuration-control register 0 bits 2-27 TI486SXL 4-15 

configuration-control register 1 bits 2-28 TI486SXLC 3-13 

control register 0 bits 2-19 FLUSH# pin 2-27 

CRO-register bits 2-19 interrupts INTR 2-43 

debug register DR6 and DR7 bits 2-32 KEN# pin 2-27 
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disabling (continued) 
main memory access MMAC_ A-9 
maskable interrupts INTR 2-15 
paging 2-2 
protected mode (8086-class CPU) 2-19 
SMM pins 2-28 
suspend pins 2-27 
write protection 2-28 


displacement addressing modes 2-38 
DX support D-5 
DX4 support D-6 


EAX register 
value after self test 
TI486SXL 4-20 
TI486SXLC 3-18 


eee field 
for instructions 7-11 


effective address 
calculation 2-37 
setting length 2-22 


EFLAGS register 2-14, 2-15 


electrical connections 
decoupling 5-2 
ground 5-2 
NC designated terminals 5-3 
power 5-2 
pullup/pulldown resistors 5-2 
unused inputs 5-3 


enabling 
A20M pin 2-27, C-3 
alignment check 2-19 
cache 2-19 
cache flush 2-27 
cacheability 2-28 
clock doubled 2-27, B-2 
using software 
TI486SXL 4-15 
TI486SXLC 3-13 
FLUSH# pin 2-27 
interrupts INTR 2-43 
KEN# pin 2-27 
locked hardware signal 7-4 
main memory access MMAC_ A-9 
maskable interrupts 2-15 
paging 2-19 
protected mode 2-19 
segment default override 7-4 
SMI# pin 
TI486SXL_ 2-30 
TI486SXLC 2-29 


Index 


enabling (continued) 
SMM _ A-11 
memory space 2-28 
pins 2-28 
suspend pins 2-27 
system-management mode A-11 
write protection 2-28 


entering 

clock-doubled mode 
TI486SXL_ 4-16 
TI486SXLC 3-14 

float mode 
TI486SXL 4-54 
TI486SXLC 3-48 

hold-acknowledge state 
TI486SXL 4-45 
TI486SXLC 3-39 

virtual-8086 mode 2-61 


error 
coprocessor 
TI486SXL 4-6 
TI486SXLC 3-6 


errorcodes 2-48 
bit definitions 2-48 
format 2-48 


example 
altering SMM code limits A-34 
clearing VM bit 
after saving registers A-42 
code 
for turning cache off B-5 
for turning cache on B-6 
debugging SMI code A-36 
detection 
ofa TI microprocessor A-26 
of SMM capable version A-28 
enabling SMM_  A-11 
enabling/disabling clock doubling 
TI486SXL 4-15 
TI486SXLC 3-13 
format of data used by SVDC/RSDC_ A-32 
loading SMM memory with SMI interrupt 
handler A-22 
SMI handler A-17 


exceptions 2-44 
abort 2-45 
fault 2-44 
invalid opcode 2-7 
priorities 2-47 
processing 2-43 
realmode 2-47 
trap 2-44 


exceptions and interrupts 2-43 
exceptions in real mode 2-47 


execution pipeline 1-17 
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Index 


exiting flags (continued) 
clock-doubled mode I/O privilege level 2-15 
TI486SXL 4-16 interrupt enable 2-15, 7-12 
TI486SXLC 3-14 nested task 2-15 
float mode overflow 2-15, 7-12 
TI486SXL 4-54 parity 2-15, 7-12 
TI486SXLC_ 3-48 resume 2-15 
hold acknowledge state sign 2-15, 7-12 
TI486SXL 4-45 trap enable 2-15, 7-12 
TI486SXLC 3-39 virtual 8086 mode 2-15 
SMI handler A-9 zero 2-15, 7-12 
virtual-8086 mode 2-61 flag-word register 2-14 
extra-segment-selector register 2-12 bit definitions 2-15 
: initial value 2-3 to 2-4 
extra-segment registers float 


initial values 2-3 to 2-4 TI486SXL 4-54 


TI486SXLC 3-48 


float delay 
Gi TI486SXL 5-34 
TI486SXLC 5-31 
' flow diagram 
fault exceptions 2-44 system management and suspend 2-56 
field system-management mode execution 2-51 
address displacement format 7-2 FLUSH# pin 
base 7-9 disabling 2-27 
d pe enabling 2-27 
eee 7- : 
flags 7-12 bel 
sie tae format 7-2 TIABGSXL 4-43 
mod 7-9 TI486SXLC 3-37 
med tet. 27 cache (internal) 2-27, C-4 
mod vin tonnat. 722 instruction-decode queue 2-59 
apcode: 725 internal pipeline 2-2 
Seca format 7-2 translation look-aside buffer 2-42 
prefix bytes 7-4 format 
prefix format 7-2 errorcodes 2-48 
reg 7-6 for instructions 7-2 
s-i-b format 7-2 format of data used by SVDC/RSDC instructions, in 
sreg2 7-10 system-management mode A-32 
sreg3 7-11 functional block diagram 
ss 7-10 TI486SXL_ 1-10 
w 7-5 TI486SXLC_ 1-6 
fills, cache functional timing 
TI486SXL 4-41 entering and exiting float 
TI486SXLC 3-36 TI486SXL 4-54 
first code fetch, after reset TI486SXLC 3-48 
TI486SXL 4-20 fastest 
Tl486SXLC 3-18 nonpipelined read cycles 
fl TI486SXL 4-22 
ags TI486SXLC 3-20 
abbreviations used in instruction set list 7-12 pipelined read cycles 
actions based on instruction 7-12 TI486SXL 4-27 
alignment check 2-15 TI486SXLC 3-25 
auxiliary carry 2-15, 7-12 fastest transition to pipelined address following 
carry 2-15, 7-12 idle bus state 
definitions 2-15 TI486SXL 4-30 
direction 2-15, 7-12 TI486SXLC 3-28 
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functional timing (continued) 
HALT-initiated suspend mode 
TI486SXL 4-52 
TI486SXLC 3-46 
I/O trap 
TI486SXL_ 4-50 
TI486SXLC 3-44 
interrupt-acknowledge cycles 
TI486SXL 4-37 
TI486SXLC 3-32 
masking A20 using A20M during burst of bus 
cycles 
TI486SXL 4-44 
TI486SXLC 3-38 
nonpipeliined, cache fills using KEN#, 
TI486SXLC 3-36 
nonpipelined 
bus cycles using BS16# 
TI486SXL 4-34 
cache fills using KEN# 
TI486SXL 4-41 
cache fills using KEN# and BS16# 
TI486SXL 4-42 
halt cycle 
TI486SXL 4-39 
TI486SXLC_ 3-34 
read and write cycles 
TI486SXL 4-23 
TI486SXLC_ 3-21 
wait states 
TI486SXL 4-24 
TI486SXLC 3-22 
pipelined 
cache fills using KEN# 
TI486SXL 4-43 
TI486SXLC 3-37 
shutdown cycle 
TI486SXL 4-40 
TI486SXLC 3-35 
wait states 
TI486SXL 4-28 
TI486SXLC 3-26 
requesting hold 
from active nonpipelined bus 
TI486SXL 4-47 
TI486SXLC_ 3-41 
from active pipelined bus 
TI486SXL 4-48 
TI486SXLC_ 3-42 
from bus-idle state 
TI486SXL 4-46 
TI486SXLC_ 3-40 
SMI# pin 
TI486SXL_ 4-49 
TI486SXLC 3-43 
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functional timing (continued) 
stopping CLK2 during suspend mode 
TI486SXL 4-53 
TI486SXLC 3-47 
SUSP#-initiated suspend mode 
TI486SXL 4-51 
TI486SXLC 3-45 
transitioning to pipelined address during burst of 
bus cycles 
TI486SXL 4-31 
TI486SXLC 3-29 
functional timing and bus operation 
TI486SXL_ 4-21 
TI486SXLC 3-19 


gate descriptors 2-22 
bit definitions 2-23 
gates 2-59 
call 2-59 
interrupt 2-59 
task 2-59 
trap 2-59 
general cache invalidation C-4 
general-purpose registers 2-11 
data 2-11 
index and pointer 2-11 
pointer and index 2-11 
base pointer 2-11 
destination index 2-11 
source index 2-11 
stack pointer 2-11 
generating A1—A0O 
as a function of byte enables 
TI486SXL 4-13 
global-descriptor table 2-40 
register 2-20 
granularity 
setting limit 2-22 
ground electrical connections 5-2 


halt bus cycles 
TI486SXL 4-38 
TI486SXLC 3-33 

halt and shutdown 2-57 

HALT-initiated suspend mode 
TI486SXL 4-51 
TI486SXLC 3-46 
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hardware considerations 
address bit A20M C-3 
address strobes A-5 
cache invalidation C-4 
chipset READY#, A-5 
connecting terminals C-2 
modifications for 168-pin CPGA_ D-1 
SMI# pin timing A-5 
SMM pins A-5 
header 
SMM memory space 2-50 
HLDA valid delay timing 
TI486SXL 5-34 
TI486SXLC 5-31 
hold acknowledge signal states 
TI486SXL 4-14 
TI486SXLC 3-12 
hold acknowledge state 
entering 
TI486SXL 4-45 
TI486SXLC 3-39 
exiting 
TI486SXL 4-45 
TI486SXLC 3-39 
requesting from idle bus 
TI486SXL 4-45 
TI486SXLC 3-39 
requesting from nonpipelined bus 
TI486SXL 4-45 
TI486SXLC 3-39 
requesting from pipelined bus 
TI486SXL 4-45 
TI486SXLC 3-39 


/O 
address space 2-8, 2-9 
configuration register access 2-8 
floating 
TI486SXL 4-54 
TI486SXLC 3-48 
privilege level flag 2-15 
privilege levels 2-58 
trapping 
TI486SXL 4-49 
TI486SXLC 3-43 
implementation 
system-management mode A-5 
index addressing modes 2-38 
index field 
for instructions 7-10 
indirect addressing mode 2-38 
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initial value 
accumulator 2-3 to 2-4 
address-region registers 2-3 to 2-4 
base register 2-3 to 2-4 
base-pointer register 2-3 to 2-4 
code-segment register 2-3 to 2-4 
configuration-control registers 2-3 to 2-4 
count register 2-3 to 2-4 
data register 2-3 to 2-4 
data-segment register 2-3 to 2-4 
debug register 2-3 to 2-4 
destination-index register 2-3 to 2-4 
extra-segment registers 2-3 to 2-4 
flag-word register 2-3 to 2-4 
instruction-pointer register 2-3 to 2-4 
interrupt-descriptor-table register 2-3 to 2-4 
machine-status-word register 2-3 to 2-4 
source-index register 2-3 to 2-4 
stack-pointer register 2-3 to 2-4 
stack-segment register 2-3 to 2-4 
initialization 2-2 
protected mode 2-59 
initiating 
protected mode 2-59 
self test 
TI486SXL 4-19 
TI486SXLC 3-17 
suspend mode 
TI486SXL 4-50 
TI486SXLC_ 3-44 


initiating and maintaining nonpipelined bus cycles 
TI486SXL 4-25 
TI486SXLC 3-23 


initiating and maintaining pipelined bus cycles 
TI486SXL_ 4-30 
TI486SXLC 3-28 


initiating suspend mode 
TI486SXL 4-51 
TI486SXLC 3-46 


input clock, stopping 
TI486SXL 4-52 
TI486SXLC 3-47 
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nonpipelined (continued) 
bus states 
TI486SXL 4-22 
TI486SXLC 3-20 
halt cycle 
TI486SXL 4-38 
TI486SXLC 3-33 
read and write cycles 
TI486SXL 4-23 
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privilege-level flag 2-14 
VO 2-15 
processor initialization 2-2 
protected mode 2-57 
address calculation 2-39 
initialization and transition 2-59 
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debug 2-31 haa 2-15 
initial value 2-3 to 2-4 g 
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TI486SXLC 3-12 
during suspend mode 
TI486SXL 4-18 
TI486SXLC 3-16 
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test registers 2-33 


testing/debugging SMM code 
system-management mode A-35 


thermal characteristics 6-18 
parameter definitions 6-20 


thermal management 
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TI486SXLC-040 5-25 
CLK2 measurement points 5-19 
clock synchronization 
TI486SXL 4-19 
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write cycle valid delay timing 
TI486SXL 5-33 
TI486SXLC 5-30 


TLB-test registers 2-33 
transfer privilege levels 2-58 


transitions, bus states 
TI486SXL 4-32 
TI486SXLC 3-30 
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